UBUNTU-CVE-2026-90006: Use After Free

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damonstop() failure damonsamplemtierstop() assumes its damonstop() call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damonstop() call. However, if a given context is already stopped, damonstop() fails and returns an error while letting the DAMON contexts that have not yet stopped keep running. This kind of unexpected early DAMON context stops could happen due to memory allocation failures in kdamondfn(). Because damonsamplemtierstop() just deallocates all DAMON contexts with damontarget and damonregion objects that are linked to the contexts, the execution of the unstopped DAMON context (kdamond) ends up using the memory that freed (use-after-free). Fix the issue by separating the damonstop() to be invoked per context. Note that DAMONSYSFS also allows multiple DAMON contexts execution. But, it calls damonstop() for each context one by one. Hence this issue is only in mtier. For the long term, it would be better to refactor damonstop() to always ensure stopping all contexts regardless of the failures in the middle. Make this fix in the current way, though, to keep it simple and easy to backport. I will do the refactoring later. The issue was discovered [1] by Sashiko.