CVE-2026-31457

mm/damon/sysfs: check contexts->nr in repeat_call_fn

published April 22, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs: check contexts->nr in repeat_call_fn

damon_sysfs_repeat_call_fn() calls damon_sysfs_upd_tuned_intervals(),

damon_sysfs_upd_schemes_stats(), and

damon_sysfs_upd_schemes_effective_quotas() without checking contexts->nr.

If nr_contexts is set to 0 via sysfs while DAMON is running, these

functions dereference contexts_arr[0] and cause a NULL pointer

dereference. Add the missing check.

For example, the issue can be reproduced using DAMON sysfs interface and

DAMON user-space tool (damo) [1] like below.

$ sudo damo start --refresh_interval 1s

$ echo 0 | sudo tee \

/sys/kernel/mm/damon/admin/kdamonds/0/contexts/nr_contexts

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-04-22T13:53Z
EPSS history
Timeline
  • 22 APR 13:53Z
    mm/damon/sysfs: check contexts->nr in repeat_call_fn
    cvelistv5