Riskcovery

CVE-2026-52905

mm/damon/core: disallow non-power of two min_region_sz on damon_start()

State
Published
Severity
Not scored
Published
Jun 9, 2026
Updated
Jun 14, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/core: disallow non-power of two min_region_sz on damon_start()

Commit d8f867fa0825 ("mm/damon: add damon_ctx->min_sz_region") introduced a bug that allows unaligned DAMON region address ranges. Commit c80f46ac228b ("mm/damon/core: disallow non-power of two min_region_sz") fixed it, but only for damon_commit_ctx() use case. Still, DAMON sysfs interface can emit non-power of two min_region_sz via damon_start(). Fix the path by adding the is_power_of_2() check on damon_start().

The issue was discovered by sashiko [1].

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d8f867fa0825fb3e358457566d7326d8aab2406a to before 1de2db19a6028abe7d905875922faef5b873de67Affected
  • d8f867fa0825fb3e358457566d7326d8aab2406a to before 89b6226b6c2a4add3939f361653a47c212d6ab75Affected
  • d8f867fa0825fb3e358457566d7326d8aab2406a to before 95093e5cb4c5b50a5b1a4b79f2942b62744bd66aAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.4 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.