CVE-2026-72177: mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs()
Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths".
Error paths of damonsysfsaccesspatternadddirs() and damonsysfsschemeadddirs() functions put references to directories in wrong orders. As a result, uninitialized memory dereference and/or memory leak can happen. Fix those.
This patch (of 2):
In accesspatternadddirs(), error handling path puts references starting from setup failed directories. If the failure happpened from the initial allication in the setup functions, uninitialized memory dereference happen. The allocation failures will not commonly happen, but the consequence is quite bad. Fix the wrong reference put orders.
The issue was discovered [1] by Sashiko.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72177?
CVE-2026-72177 has a risk rating of 30.
How do I fix CVE-2026-72177?
To fix CVE-2026-72177, you need to apply the latest kernel patch that addresses the directory put orders in the access_pattern_add_dirs function.
What systems are affected by CVE-2026-72177?
CVE-2026-72177 affects systems running vulnerable versions of the Linux kernel where the mm/damon subsystem is implemented.
What is the nature of the vulnerability in CVE-2026-72177?
CVE-2026-72177 involves incorrect directory put orders in error paths within the damon_sysfs_access_pattern_add_dirs function.
Is CVE-2026-72177 a high-severity vulnerability?
While CVE-2026-72177 has a moderate severity rating of 30, it still requires prompt attention from system administrators.