Riskcovery

CVE-2025-40228

mm/damon/sysfs: catch commit test ctx alloc failure

State
Published
Severity
Not scored
Published
Dec 4, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs: catch commit test ctx alloc failure

Patch series "mm/damon/sysfs: fix commit test damon_ctx [de]allocation".

DAMON sysfs interface dynamically allocates and uses a damon_ctx object for testing if given inputs for online DAMON parameters update is valid. The object is being used without an allocation failure check, and leaked when the test succeeds. Fix the two bugs.

This patch (of 2):

The damon_ctx for testing online DAMON parameters commit inputs is used without its allocation failure check. This could result in an invalid memory access. Fix it by directly returning an error when the allocation failed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4c9ea539ad59ec60676930dacee02b7adde2e0c0 to before 5b3609d9b9650bdea0bfdf643e0ce57e1aed67fcAffected
  • 4c9ea539ad59ec60676930dacee02b7adde2e0c0 to before f0c5118ebb0eb7e4fd6f0d2ace3315ca141b317fAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.17.6 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.