CVE-2026-68164

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where the damon set regions() function fails to validate that input ranges are sorted by address and do not overlap. This lack of validation can lead to unexpected behavior in DAMON and DAMOS, such as incorrect monitoring snapshots and redundant action applications. In more severe cases, it can result in the creation of negative size regions, which may trigger a WARN ONCE() when CONFIG DAMON DEBUG SANITY is enabled or cause a division by zero within the damon merge two regions() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.