CVE-2026-31459

MEDIUM EPSS 2.2%
Published Apr 22, 20262mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 22, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMON_SYSFS can leak memory under allocation failure, and do NULL pointer dereference when a privileged user make wrong sequences of control. Fix those. This patch (of 3): When damon_sysfs_new_test_ctx() fails in damon_sysfs_commit_input(), param_ctx is leaked because the early return skips the cleanup at the out label. Destroy param_ctx before returning.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 14

VendorProductVersionRange
linuxlinux_kernel*≥6.18.1  –  <6.18.21
linuxlinux_kernel*≥6.19  –  <6.19.11
linuxlinux_kernel6.17.6any
linuxlinux_kernel6.18any
linuxlinux_kernel6.18any
linuxlinux_kernel6.18any
linuxlinux_kernel6.18any
linuxlinux_kernel6.18any
linuxlinux_kernel6.18any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/7fe000eb32904758a85e62f6ea9483f89d5dabfc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e9de9f3ce06b133a348006668bc8d25c6e504867
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f76f0a964bc3d7b7e253b43c669c41356bc54e71
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/7fe000eb32904758a85e62f6ea9483f89d5dabfc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e9de9f3ce06b133a348006668bc8d25c6e504867
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f76f0a964bc3d7b7e253b43c669c41356bc54e71
    Patch