CVE-2026-64239

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the DAMON sysfs implementation. The system maintains DAMOS tried region directory objects using a linked list. When a user requests a directory refresh, the function damon sysfs scheme regions rm dirs() removes region directories by putting kobj objects, while the actual deletion of the container region object from the linked list occurs within the kobj release callback function. If the callback invocation is delayed—which can occur in kernels built with CONFIG DEBUG KOBJECT RELEASE—the list may still contain regions slated for freeing. If the creation of updated region directories begins during this delay, the list can become corrupted, leading to a use-after-free condition. This can be triggered by writing update schemes tried regions to the state file in the /sys/kernel/mm/damon/admin/kdamonds/0/ directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.