CVE-2026-52905

mm/damon/core: disallow non-power of two min_region_sz on damon_start()

published June 9, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/core: disallow non-power of two min_region_sz on damon_start()

Commit d8f867fa0825 ("mm/damon: add damon_ctx->min_sz_region") introduced

a bug that allows unaligned DAMON region address ranges. Commit

c80f46ac228b ("mm/damon/core: disallow non-power of two min_region_sz")

fixed it, but only for damon_commit_ctx() use case. Still, DAMON sysfs

interface can emit non-power of two min_region_sz via damon_start(). Fix

the path by adding the is_power_of_2() check on damon_start().

The issue was discovered by sashiko [1].

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-06-09T12:36Z
EPSS history
Timeline
  • 09 JUN 12:36Z
    mm/damon/core: disallow non-power of two min_region_sz on damon_start()
    cvelistv5