Linux Kernel DAMON Subsystem Divide-By-Zero Vulnerability in Interval Scoring

Vulnerability

A divide-by-zero vulnerability has been identified in the Linux kernel's DAMON (Data Access Monitor) subsystem, specifically within the 'damon_get_intervals_score()' function. This issue arises when the region size is zero, causing the function to crash. The current implementation permits zero-size regions without justification, leading to this error. Although a patch has been applied to address the crash, it maintains backward compatibility by not prohibiting zero-size regions, which could disrupt some users. Additionally, a similar crash can occur if 'intervals_goal.access_bp' is zero, necessitating a fix in stable kernel versions.

Impact

Exploitation of this vulnerability leads to a crash of the DAMON subsystem, causing a divide-by-zero error.

Remediation

Users can apply the available patch in the Linux kernel stable tree to address this vulnerability. The patch is included in the official Linux kernel repositories.

Added: Aug 16, 2025, 11:19 AM
Updated: Aug 16, 2025, 11:19 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.