Linux Kernel CVE-2026-64184

The affected code lives in mm/damon/sysfs-schemes.c within the Linux kernel's DAMON (Data Access MONitor) subsystem. DAMON enables userspace-visible data access monitoring and exposes its configuration - including cgroup-based memory scheme targeting - through a sysfs interface. The function damon_sysfs_memcg_path_to_id() iterates over all memory cgroups using mem_cgroup_iter() to locate a cgroup by its path. When the target cgroup is found, the function breaks out of the loop early. The kernel's cgroup iterator contract requires mem_cgroup_iter_break() to be called on early exit to release the internal reference held by the iterator; omitting this call leaks that cgroup reference on every early exit. Repeated invocations accumulate leaked references against cgroup objects. No CWE is formally assigned by NVD, but this maps to CWE-772 (Missing Release of Resource after Effective Lifetime). The CPE cpe:2.3:a:linux:linux:* confirms the Linux kernel as the sole affected product; affected versions are bounded by EUVD-2026-45869 and upstream stable git commits.