CVE-2026-68165

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description DAMON core logic assumes that zero length regions do not exist. However, certain API callers, including DAMON SYSFS, DAMON RECLAIM, and DAMON LRU SORT, allow users to set empty monitoring target regions. This flaw can lead to a divide-by-zero error within the damon merge two regions() function and trigger a WARN ONCE() on kernels where CONFIG DAMON DEBUG SANITY is enabled. The issue occurs because the damon set regions() function fails to validate the provided ranges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.