CVE-2026-46067

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mm/damon/core: validate damos_quota_goal-&gt;nid for node_memcg_{used,free}_bp<br /> <br /> Users can set damos_quota_goal-&gt;nid with arbitrary value for<br /> node_memcg_{used,free}_bp. But DAMON core is using those for NODE-DATA()<br /> without a validation of the value. This can result in out of bounds<br /> memory access. The issue can actually triggered using DAMON user-space<br /> tool (damo), like below.<br /> <br /> $ sudo mkdir /sys/fs/cgroup/foo<br /> $ sudo ./damo start --damos_action stat --damos_quota_interval 1s \<br /> --damos_quota_goal node_memcg_used_bp 50% -1 /foo<br /> $ sudo dmseg<br /> [...]<br /> [ 524.181426] Unable to handle kernel paging request at virtual address 0000000000002c00<br /> <br /> Fix this issue by adding the validation of the given node id. If an<br /> invalid node id is given, it returns 0% for used memory ratio, and 100%<br /> for free memory ratio.