CVE-2026-46183

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description A use-after-free issue exists in the Linux kernel within the DAMON sysfs schemes. The damon sysfs quot goal->path variable can be read and written by users via the DAMON sysfs 'path' file. While reads for parameter committing are protected by damon sysfs lock, direct user-driven reads and writes are not. Because the write operation deallocates the path-pointing buffer, concurrent reads using separate open files can access the already freed buffer.

Recommendations Update to kernel-devel-7.0.11-1.1 for openSUSE Tumbleweed. At the moment, there is no information about a newer version that contains a fix for this vulnerability for the Linux kernel.