Not yet scoredPublished Aug 10, 2026

CVE-2026-68165mm/damon/core: validate ranges in damon_set_regions()

Updated under an hour ago (Oct 27, 2026, 1:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions() DAMON core logic assumes zero length regions don't exist. However, a few DAMON API callers including DAMON_SYSFS, DAMON_RECLAIM and DAMON_LRU_SORT allow users to set empty monitoring target regions. This could result in WARN_ONCE() on CONFIG_DAMON_DEBUG_SANITY enabled kernel, and divide-by-zero from damon_merge_two_regions(). For example, the WANR_ONCE() can be triggered like below. # grep DAMON_DEBUG_SANITY /boot/config-$(uname -r) # CONFIG_DAMON_DEBUG_SANITY=y # damo start # cd /sys/kernel/mm/damon/admin/kdamonds/0 # echo 0 > contexts/0/targets/0/regions/0/start # echo 0 > contexts/0/targets/0/regions/0/end # echo commit > state # dmesg [....] [ 73.705780] ------------[ cut here ]------------ [ 73.707552] start 0 >= end 0 [ 73.708452] WARNING: mm/damon/core.c:359 at damon_new_region+0x6e/0x80, CPU#1: kdamond.0/758 [...] All DAMON API callers eventually use damon_set_regions() to setup the regions. Add the validation logic in the function.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before 71cf8a3ee1c18cfa8b88cc14bac9c2f43dd29f9b; from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before b585facbafbb5cf117b37b1c75819ac046646c27; from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before c927b73a5694c735314ea10e7c81c07f9bd51ad7; 43b0536cb4710e7bb591edfda7e68a1c327a3409 builds before 4b6f1d6d5d07855bd1bb9e64922b049062138bfa; 43b0536cb4710e7bb591edfda7e68a1c327a3409 builds before 43aaddd0fa92010a68adeda7744c7cf497a1c8e9; from 43b0536cb4710e7bb591edfda7e68a1c327a3409 before 1292c0ecb1caefb8ca064a3639d5673991e8810c	CNA record

References

References

https://git.kernel.org/stable/c/71cf8a3ee1c18cfa8b88cc14bac9c2f43dd29f9b
https://git.kernel.org/stable/c/b585facbafbb5cf117b37b1c75819ac046646c27
https://git.kernel.org/stable/c/c927b73a5694c735314ea10e7c81c07f9bd51ad7
https://git.kernel.org/stable/c/4b6f1d6d5d07855bd1bb9e64922b049062138bfa
https://git.kernel.org/stable/c/43aaddd0fa92010a68adeda7744c7cf497a1c8e9
https://git.kernel.org/stable/c/1292c0ecb1caefb8ca064a3639d5673991e8810c

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.