Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- ~5.18
A vulnerability in the Linux kernel's DAMON (Data Access Monitoring) subsystem has been addressed. The issue arose when the setup of a context DAMON sysfs directory failed after the attributes directory was created. In such cases, the subdirectories of the attributes directory were not removed, leading to a memory leak and a nearly non-functional DAMON sysfs interface until the system was rebooted. The vulnerability has been fixed by ensuring that the directories are properly cleaned up in the event of a setup failure.
The vulnerability could cause a memory leak and disrupt the functionality of the DAMON sysfs interface, leaving it in a broken state until the system is rebooted.
To reproduce this issue, create a context DAMON sysfs directory and intentionally cause a failure after the attributes directory has been set up. This will result in the subdirectories of the attributes directory not being cleaned up, leading to a memory leak and a malfunctioning DAMON sysfs interface.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for updating the Linux kernel can be found in the official Linux documentation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.