{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.9-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  mm/damon/lru_sort: error out for \u003e10000 active_mem_bp  damos_quota_score() can trigger division by zero if the target value is zero.  DAMON_LRU_SORT lets users set the target value for the hot memory scheme via active_mem_bp parameter.  It avoids setting it as the target value if the parameter value is zero.  However, it also sets the cold memory scheme with a target value that is calculated as '10000 - active_mem_bp + 2'.  Hence, if a user sets active_mem_bp 10002, the cold memory scheme's quota goal target value can be zero.  As a result, division by zero can be triggered.  Fix by returning an error when the user tries to start DAMON with \u003e10000 active_mem_bp parameter value.  It makes no sense to set active_mem_bp with 10002.  It also requires module parameters write permission to reproduce the issue.  That said, the consequence is quite bad.  One reliable way to reproduce the issue is like below:      # cd /sys/module/damon_lru_sort/parameters     # echo 1000 \u003e wmarks_high     # echo 995 \u003e wmarks_mid     # echo 0 \u003e wmarks_low     # echo 10002 \u003e active_mem_bp     # echo Y \u003e enabled     # dmesg -w     [...]     [  597.421247] Oops: divide error: 0000 [#1] SMP NOPTI     [  597.428848] RIP: 0010:damos_quota_score+0x6f/0x480  This issue was discovered [1] by Sashiko.",
  "id": "DEBIAN-CVE-2026-74645",
  "modified": "2026-09-14T16:47:36.629770906Z",
  "published": "2026-08-22T16:16:37.837Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-74645"
    }
  ],
  "upstream": [
    "CVE-2026-74645"
  ]
}