CVE-2025-40228
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/12/2025
Última modificación:
04/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mm/damon/sysfs: catch commit test ctx alloc failure<br />
<br />
Patch series "mm/damon/sysfs: fix commit test damon_ctx [de]allocation".<br />
<br />
DAMON sysfs interface dynamically allocates and uses a damon_ctx object<br />
for testing if given inputs for online DAMON parameters update is valid.<br />
The object is being used without an allocation failure check, and leaked<br />
when the test succeeds. Fix the two bugs.<br />
<br />
<br />
This patch (of 2):<br />
<br />
The damon_ctx for testing online DAMON parameters commit inputs is used<br />
without its allocation failure check. This could result in an invalid<br />
memory access. Fix it by directly returning an error when the allocation<br />
failed.



