Memory Cgroup Reference Leak in Linux Kernel

CVE-2026-64184

What is CVE-2026-64184?

A significant vulnerability has been identified in the Linux kernel concerning the memory cgroup functionality. The issue arises from a missing call to mem_cgroup_iter_break() within the damon_sysfs_memcg_path_to_id() function, leading to an unintended leak of the cgroup reference. This flaw can potentially impact system performance and resource management. The vulnerability was rectified by ensuring that mem_cgroup_iter_break() is invoked correctly before the loop exit, thereby preventing the reference leak from occurring. Integrating the fix enhances the security posture of affected kernel versions.

References