CyberRota
← Ana sayfaya dön

CVE-2026-31457

MEDIUM · CVSS 5.5 EPSS %0.01

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-04-22T14:16:41.133 · Çekilme zamanı: 2026-05-22T12:28:28.873684+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-31457
Severity
MEDIUM
CVSS
5.5
EPSS
%0.01
Linux

Orijinal NVD Açıklaması

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_fn damon_sysfs_repeat_call_fn() calls damon_sysfs_upd_tuned_intervals(), damon_sysfs_upd_schemes_stats(), and damon_sysfs_upd_schemes_effective_quotas() without checking contexts->nr. If nr_contexts is set to 0 via sysfs while DAMON is running, these functions dereference contexts_arr[0] and cause a NULL pointer dereference. Add the missing check. For example, the issue can be reproduced using DAMON sysfs interface and DAMON user-space tool (damo) [1] like below. $ sudo damo start --refresh_interval 1s $ echo 0 | sudo tee \ /sys/kernel/mm/damon/admin/kdamonds/0/contexts/nr_contexts