PT-2026-34363 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-31458

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Multiple sysfs command paths dereference contexts arr[0] without verifying that kdamond->contexts->nr equals 1. A privileged user can set nr contexts to 0 via sysfs while DAMON is running, leading to NULL pointer dereferences. This occurs when executing commands such as 'update schemes stats', 'update schemes tried regions', 'update schemes tried bytes', 'update schemes effective quotas', or 'update tuned intervals' through the state file in the sysfs path '/sys/kernel/mm/damon/admin/kdamonds/0'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31458

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-31458 · Security Note
• https://git.kernel.org/stable/c/bbe03ad3fb9e714191757ca7b41582f930be7be2 · Note
• https://git.kernel.org/stable/c/1bfe9fb5ed2667fb075682408b776b5273162615 · Note
• https://twitter.com/CVEnew/status/2046980030526357549 · Twitter Post
• https://git.kernel.org/stable/c/708033c231bd782858f4ddbb46ee874a5a5fbdab · Note
• https://git.kernel.org/stable/c/aba546061341b56e9ffb37e1eb661a3628b6ec12 · Note
• https://git.kernel.org/stable/c/1e8da792672481d603fa7cd0d815577220a3ee27 · Note