Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A divide-by-zero vulnerability has been identified in the Linux kernel's DAMON (Data Access Monitor) subsystem, specifically within the 'damon_get_intervals_score()' function. This issue arises when the region size is zero, causing the function to crash. The current implementation permits zero-size regions without justification, leading to this error. Although a patch has been applied to address the crash, it maintains backward compatibility by not prohibiting zero-size regions, which could disrupt some users. Additionally, a similar crash can occur if 'intervals_goal.access_bp' is zero, necessitating a fix in stable kernel versions.
Exploitation of this vulnerability leads to a crash of the DAMON subsystem, causing a divide-by-zero error.
Users can apply the available patch in the Linux kernel stable tree to address this vulnerability. The patch is included in the official Linux kernel repositories.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.