Memory Leak and Handling Issues in Linux Kernel DAMON Sample Modules

CVE-2026-90005

What is CVE-2026-90005?

In Linux kernel DAMON sample modules, a vulnerability exists that leads to memory leaks and possible use-after-free issues due to improper handling of failure conditions in damon_start() and damon_stop(). When damon_start() fails, it does not adequately clean up resources, resulting in leaked memory. This issue can be particularly problematic in scenarios where exclusive module runs are enforced, leading to disrupted operations and further memory consumption. Properly managing these failure scenarios is critical to maintain kernel stability and secure operation.

References