CVE-2026-46008

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/core: fix damos_walk() vs kdamond_fn() exit race

When kdamond_fn() main loop is finished, the function cancels remaining

damos_walk() request and unset the damon_ctx->kdamond so that API callers

and API functions themselves can show the context is terminated.

damos_walk() adds the caller's request to the queue first. After that, it

shows if the kdamond of the damon_ctx is still running (damon_ctx->kdamond

is set). Only if the kdamond is running, damos_walk() starts waiting for

the kdamond's handling of the newly added request.

The damos_walk() requests registration and damon_ctx->kdamond unset are

protected by different mutexes, though. Hence, damos_walk() could race

with damon_ctx->kdamond unset, and result in deadlocks.

For example, let's suppose kdamond successfully finished the damow_walk()

request cancelling. Right after that, damos_walk() is called for the

context. It registers the new request,

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References