Memory Leak Vulnerability in Linux Kernel Affects Resource Management

CVE-2026-31653

What is CVE-2026-31653?

A memory leak vulnerability has been identified in the Linux kernel's management of DAMON_SYSFS. If the damon_call() function fails due to the premature termination of the kdamond process, the dynamically allocated repeat_call_control may not be deallocated, leading to resource leakage. This can occur when the monitoring context is created for a virtual address process that is killed immediately before the damon_call invocation. To address this issue, a fix has been implemented to ensure that repeat_call_control is properly deallocated if damon_call() encounters an error.

References