PT-2026-64679
CVE-2026-64458
·
Published
2026-06-23
·
Updated
2026-10-13
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
Three issues exist in the
damon hot score() function due to improper handling of extreme monitoring intervals configured by the user. If the sampling interval is set to zero, the damon max nr accesses() function, which is called by damon hot score(), triggers a divide-by-zero error. Similarly, if the aggregation interval is set to zero, damon max nr accesses() returns zero, which can lead to another divide-by-zero error when used as a denominator in damon hot score(). Additionally, setting a very high aggregation interval can cause damon hot score() to return a value outside the expected range, leading to an out-of-bounds array access when the value is used as an index for the regions score histogram array.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾