The Linux kernel's DAMON_SAMPLE_MTIER and DAMON_LRU_SORT modules allowed users to trigger a division by zero in the function damos_quota_score() by setting node0_mem_{used,free}_bp parameters to zero. This lack of validation could cause a kernel crash (Oops) due to a divide error. The vulnerability was fixed by adding checks to return an error when zero values are provided for these parameters, preventing the division by zero condition. The issue was discovered by Sashiko and affects the sample module DAMON_SAMPLE_MTIER, which, despite being a sample, could be misconfigured in real-world scenarios leading to crashes.

Exploitation of this vulnerability results in a kernel crash (Oops) due to a division by zero error. This can cause denial of service on affected systems running the vulnerable Linux kernel module. There is no indication of privilege escalation or data corruption beyond the crash.

A patch has been applied to the Linux kernel to add parameter validation that prevents zero values for node0_mem_{used,free}_bp parameters in DAMON_SAMPLE_MTIER, avoiding division by zero. Users should update to the fixed kernel version containing this patch. Since this is a kernel patch, upgrading the kernel to a version including this fix is the recommended remediation. Patch status is confirmed resolved by the vendor patch series.