The vulnerability exists in the Linux kernel's mm/damon/sysfs-schemes component where the memcg_path buffer can be concurrently read and written without proper synchronization. Specifically, user-driven direct reads and writes to the memcg_path file in the DAMON sysfs interface are not protected by the damon_sysfs_lock, while writes deallocate the buffer. This can lead to use-after-free conditions if reads occur on a freed buffer, especially when separate open file descriptors are used. The patch protects both reads and writes with damon_sysfs_lock to prevent this race condition.

Exploitation of this vulnerability could lead to use-after-free conditions causing potential arbitrary code execution, data corruption, or system crashes. The CVSS vector indicates local attack vector with low complexity and no user interaction, and high impact on confidentiality, integrity, and availability.

A patch is available that adds damon_sysfs_lock protection to both reads and writes of the memcg_path buffer in the DAMON sysfs interface. Systems running affected Linux kernel versions prior to 7.0.0-28.28.1 should be updated to a fixed version. No vendor advisory was provided, so patch status should be confirmed with the Linux kernel or distribution vendor for official updates.