In the Linux kernel, the following vulnerability has been resolved:
mm/damon/core: disallow non-power of two min_region_sz on damon_start()
Commit d8f867fa0825 ("mm/damon: add damon_ctx->min_sz_region") introduced a bug that allows unaligned DAMON region address ranges. Commit c80f46ac228b ("mm/damon/core: disallow non-power of two min_region_sz") fixed it, but only for damon_commit_ctx() use case. Still, DAMON sysfs interface can emit non-power of two min_region_sz via damon_start(). Fix the path by adding the is_power_of_2() check on damon_start().
The issue was discovered by sashiko [1].
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade kernel6.18-toolsUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfo-common-aarch64Upgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-headersUpgrade python3-perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.18-develUpgrade kernel-livepatch-6.18.30-61.116Upgrade perf6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-develUpgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18Upgrade kernel6.18 | Jul 10, 2026 | Jun 9, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1008-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fde-7.0Upgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-genericUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-virtualUpgrade linux-image-oem-24.04dUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-raspiUpgrade linux-image-gcp-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-oracle-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-7.0 | Jul 1, 2026 | Jun 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub