CVE-2026-74645

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: error out for >10000 active_mem_bp damos_quota_score() can trigger division by zero if the target value is zero. DAMON_LRU_SORT lets users set the target value for the hot memory scheme via active_mem_bp parameter. It avoids setting it as the target value if the parameter value is zero. However, it also sets the cold memory scheme with a target value that is calculated as '10000 - active_mem_bp + 2'. Hence, if a user sets active_mem_bp 10002, the cold memory scheme's quota goal target value can be zero. As a result, division by zero can be triggered. Fix by returning an error when the user tries to start DAMON with >10000 active_mem_bp parameter value. It makes no sense to set active_mem_bp with 10002. It also requires module parameters write permission to reproduce the issue. That said, the consequence is quite bad. One reliable way to reproduce the issue is like below: # cd /sys/module/damon_lru_sort/parameters # echo 1000 > wmarks_high # echo 995 > wmarks_mid # echo 0 > wmarks_low # echo 10002 > active_mem_bp # echo Y > enabled # dmesg -w [...] [ 597.421247] Oops: divide error: 0000 [#1] SMP NOPTI [ 597.428848] RIP: 0010:damos_quota_score+0x6f/0x480 This issue was discovered [1] by Sashiko.

• https://git.kernel.org/stable/c/06befa61c427e74319781e6f35a364cfc32dbae8
• https://git.kernel.org/stable/c/e7e5e5e0dfe2ea171044c24c263efae4ee882b3f

Published

Aug 22, 2026

Last Modified

Aug 22, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7464The WP Google Maps Integration plugin for WordPress is vulne…6.1
• CVE-2026-74640In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74641In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74642In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74643In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74644In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74646In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74647In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74648In the Linux kernel, the following vulnerability has been re…
• CVE-2026-74649In the Linux kernel, the following vulnerability has been re…
• CVE-2026-7465The Spectra Gutenberg Blocks – Website Builder for the Block…8.8
• CVE-2026-74650In the Linux kernel, the following vulnerability has been re…