Riskcovery

CVE-2023-53555

mm/damon/core: initialize damo_filter->list from damos_new_filter()

State
Published
Severity
Not scored
Published
Oct 4, 2025
Updated
May 11, 2026
Reserved
Oct 4, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/core: initialize damo_filter->list from damos_new_filter()

damos_new_filter() is not initializing the list field of newly allocated filter object. However, DAMON sysfs interface and DAMON_RECLAIM are not initializing it after calling damos_new_filter(). As a result, accessing uninitialized memory is possible. Actually, adding multiple DAMOS filters via DAMON sysfs interface caused NULL pointer dereferencing. Initialize the field just after the allocation from damos_new_filter().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 98def236f63c66629fb6b2d4b69cecffc5b46539 to before da7beebb49c643cd03c54447ed66595936a7a1ceAffected
  • 98def236f63c66629fb6b2d4b69cecffc5b46539 to before 5f1fc67f2cb8d3035d3acd273b48b97835af8afdAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.4.11 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.