The vulnerability in the Linux kernel relates to the damon_sysfs_memcg_path_to_id() function in the mm/damon/sysfs-schemes code. This function breaks out of a mem_cgroup_iter() loop without calling mem_cgroup_iter_break(), which is required to properly release the cgroup reference. The missing call leads to a reference leak, potentially causing resource exhaustion or availability issues. The fix involves adding the missing mem_cgroup_iter_break() call before breaking the loop. The issue was discovered by Sashiko and is tracked as CVE-2026-64184.

The vulnerability causes a leak of a cgroup reference, which can lead to resource exhaustion and thus impact system availability. There is no impact on confidentiality or integrity. The CVSS score of 5.5 (medium severity) reflects a local attacker with low privileges being able to cause an availability disruption without user interaction.

The vulnerability has been resolved in the Linux kernel source by adding the missing mem_cgroup_iter_break() call. Users and administrators should update their Linux kernel to a version that includes this fix. Patch status is not explicitly stated in the provided data; therefore, check the official Linux kernel advisories or vendor updates for the exact fixed versions and apply the official patch accordingly.