Memory Access Vulnerability in Linux Kernel's DAMON Sysfs Interface

CVE-2025-40228

What is CVE-2025-40228?

A vulnerability in the Linux kernel's DAMON sysfs interface could lead to invalid memory access due to the lack of allocation failure checks during testing of DAMON parameters. The absence of these checks allows for potential memory leaks upon successful tests. The issue has been addressed in a patch that introduces proper error handling to prevent such conditions, ensuring that allocation failures are detected and reported accordingly.

References