Linux Kernel mem_cgroup_iter Leak via sysfs Access
CVE-2026-64184 Published on July 19, 2026
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
In the Linux kernel, the following vulnerability has been resolved:
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
damon_sysfs_memcg_path_to_id() breaks mem_cgroup_iter() loop without
calling mem_cgroup_iter_break(). This leaks the cgroup reference. Fix
the issue by calling mem_cgroup_iter_break() before the break.
The issue was discovered [1] by Sashiko.
Products Associated with CVE-2026-64184
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 29cbb9a13f05b20f0777c60db9603730b487a4e0 and below 082351f9d40007414ad6af062b3a26fa02fd4b5f is affected.
- Version 29cbb9a13f05b20f0777c60db9603730b487a4e0 and below 30a361be33f3793b9ecbd10ab7be6d0564819b79 is affected.
- Version 29cbb9a13f05b20f0777c60db9603730b487a4e0 and below 302e02f9ba49f81418ec2a749ae6f5cac1d424e9 is affected.
- Version 29cbb9a13f05b20f0777c60db9603730b487a4e0 and below 1bd31386ec3b9ccec10c04429948a306ec5897c0 is affected.
- Version 29cbb9a13f05b20f0777c60db9603730b487a4e0 and below d4e7b5c4cc353f154d5ab8bb2e1ce7714d77a6e9 is affected.
- Version 6.3 is affected.
- Before 6.3 is unaffected.
- Version 6.6.142, <= 6.6.* is unaffected.
- Version 6.12.92, <= 6.12.* is unaffected.
- Version 6.18.34, <= 6.18.* is unaffected.
- Version 7.0.11, <= 7.0.* is unaffected.
- Version 7.1, <= * is unaffected.