CVE-2026-90004

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the damon apply min nr regions() function where the system repeatedly splits regions to meet a user-defined minimum limit. The process relies on the damon split region at() function, assuming it will always succeed. However, if a memory allocation failure occurs, the split operation may fail silently. If this happens to the last region in the sequence, the linked list used to fetch the next region returns an invalid pointer, potentially leading to invalid memory dereference and memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.