PT-2026-4674 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-01-25 · CVE-2026-23012

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the handling of DAMON contexts. Specifically, if damon call() is executed against a DAMON context that is not running, the function returns an error while maintaining a link to a deallocated damon call control object. Subsequent calls to damon call() on the same context can then lead to a use-after-free condition. This issue can be triggered through the DAMON sysfs interface, though exploitation is not considered straightforward, requiring sysfs write permissions and unusual file writes. The fix involves ensuring that all existing damon call() requests are cancelled before the context is terminated and cleaning up damon call control objects before returning an error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-23012

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23012.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-23012 · Security Note
• https://git.kernel.org/stable/c/23b061f421eef03647b512f3df48861706c87db3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23012 · Security Note
• https://git.kernel.org/stable/c/f9132fbc2e83baf2c45a77043672a63a675c9394 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23012 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23012 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23012 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23012 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23012 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2015448638558806351 · Twitter Post
• https://t.me/CVEtracker/42973 · Telegram Post
• https://git.kernel.org/linus/f9132fbc2e83baf2c45a77043672a63a675c9394 · Note
• https://twitter.com/vuldb/status/2015448224824516897 · Twitter Post