PT-2026-64679

CVE-2026-64458

·

Published

2026-06-23

·

Updated

2026-10-13

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description Three issues exist in the damon hot score() function due to improper handling of extreme monitoring intervals configured by the user. If the sampling interval is set to zero, the damon max nr accesses() function, which is called by damon hot score(), triggers a divide-by-zero error. Similarly, if the aggregation interval is set to zero, damon max nr accesses() returns zero, which can lead to another divide-by-zero error when used as a denominator in damon hot score(). Additionally, setting a very high aggregation interval can cause damon hot score() to return a value outside the expected range, leading to an out-of-bounds array access when the value is used as an index for the regions score histogram array.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ECHO-5A1B-4E26-F33C
OESA-2026-4039
OPENSUSE-SU-2026:11476-1
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
USN-8726-1
USN-8726-2
USN-8726-3
USN-8726-4
USN-8727-1
USN-8728-1
USN-8728-2
USN-8728-3
USN-8760-1
USN-8760-2
USN-8800-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾