Linux Kernel EUVD-2026-32470

The primary fix is to upgrade the Linux kernel to version 6.18.27 or 7.0.4, both of which include the corrected damon_stat_start() error path. For kernels running 7.1-rc1 or later, the fix is also incorporated. The three upstream fix commits (50bc1d7e, 8a62c584, e04ed278) are available on kernel.org stable trees and should be applied by distribution vendors in their next stable update cycles. As a compensating control on systems where an immediate upgrade is not feasible, restricting access to the DAMON sysfs or debugfs interfaces (e.g., via Linux Security Module policy, file permission hardening on /sys/kernel/mm/damon/, or disabling CONFIG_DAMON_STAT at build time) will prevent unprivileged local users from triggering the vulnerable code path; however, this does not eliminate the flaw. Distributions using CONFIG_DAMON_STAT=m can unload the module as a temporary measure with the trade-off of losing DAMON statistics functionality.