Linux Kernel DAMON Sysfs Directory Cleanup Vulnerability

Vulnerability

A vulnerability in the Linux kernel's DAMON (Data Access Monitoring) subsystem has been addressed. The issue arose when the setup of a context DAMON sysfs directory failed after the attributes directory was created. In such cases, the subdirectories of the attributes directory were not removed, leading to a memory leak and a nearly non-functional DAMON sysfs interface until the system was rebooted. The vulnerability has been fixed by ensuring that the directories are properly cleaned up in the event of a setup failure.

Impact

The vulnerability could cause a memory leak and disrupt the functionality of the DAMON sysfs interface, leaving it in a broken state until the system is rebooted.

Reproduction

To reproduce this issue, create a context DAMON sysfs directory and intentionally cause a failure after the attributes directory has been set up. This will result in the subdirectories of the attributes directory not being cleaned up, leading to a memory leak and a malfunctioning DAMON sysfs interface.

Remediation

Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for updating the Linux kernel can be found in the official Linux documentation.

Added: Feb 14, 2026, 4:29 PM
Updated: Feb 14, 2026, 4:29 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.4
remediation
7.7
relevance
3.0
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.