UBUNTU-CVE-2025-39941

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot write race condition Parallel concurrent writes to the same zram index result in leaked zsmalloc handles. Schematically we can have something like this: CPU0 CPU1 zramslotlock zsfreehandle zramslotlock zramslotlock...

CVE-2025-39941 zram: fix slot write race condition

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot write race condition Parallel concurrent writes to the same zram index result in leaked zsmalloc handles. Schematically we can have something like this: CPU0 CPU1 zramslotlock zsfreehandle zramslotlock zramslotlock...

CVE-2025-39941

CVE-2025-39941 relates to the Linux kernel zram subsystem. The vulnerability arises from a race in slot write handling where parallel writes to the same zram index can leak zsmalloc handles because zs_free() is executed too early. The documented fix is to reset the zram entry and assign the new h...

CVE-2025-39941 zram: fix slot write race condition

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot write race condition Parallel concurrent writes to the same zram index result in leaked zsmalloc handles. Schematically we can have something like this: CPU0 CPU1 zramslotlock zsfreehandle zramslotlock zramslotlock...

CVE-2025-39941: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot write race condition Parallel concurrent writes to the same zram index result in leaked zsmalloc handles. Schematically we can have something like this: CPU0 CPU1 zramslotlock zsfreehandle zramslotlock zramslotlock...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition during parallel concurrent writes to the same zram index, which could lead to the...

PT-2025-40637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in zram related to concurrent writes to the same zram index. This can lead to leaked zsmalloc handles. The issue occurs when multiple CPUs attempt to free memory ...

EUVD-2024-51894

Malicious code in bioql PyPI...

EUVD-2025-2620

Malicious code in bioql PyPI...

EUVD-2025-20820

Malicious code in bioql PyPI...

zram: fix NULL pointer in comp_algorithm_show()

...

CVE-2025-38241

In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix softlockup with mTHP swapin Following softlockup can be easily reproduced on my test machine with: echo always /sys/kernel/mm/transparenthugepage/hugepages-64kB/enabled swapon /dev/zram0 zram0 is a 48G swap...

CVE-2025-38241

CVE-2025-38241 affects the Linux kernel in mm/shmem and swap paths, causing a soft lockup with mTHP swapin due to a conflict between readahead-ordered folios in swap cache and the swapin folio allocation. The issue occurs when a 10G swap device (e.g., zram) is used with THP and cgroup memory limi...

CVE-2025-38241 mm/shmem, swap: fix softlockup with mTHP swapin

In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix softlockup with mTHP swapin Following softlockup can be easily reproduced on my test machine with: echo always /sys/kernel/mm/transparenthugepage/hugepages-64kB/enabled swapon /dev/zram0 zram0 is a 48G swap...

The vulnerability of the comp_algorithm_show() function in the zram component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the compalgorithmshow function in the zram component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux - Vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential use-after-free UAF in the zram table If zrammetaalloc failed prematurely, it frees the allocated zram-table without setting it to NULL. This could potentially cause zrammetafree to access the table if a user...

kernel: zram: fix NULL pointer in comp_algorithm_show()

A flaw was found in the Linux kernel's zram driver. This vulnerability can lead to a Denial of Service DoS by causing a system crash. During device initialization, a timing window allows a local user to access the device attributes through the sysfs interface before compression algorithms are...

kernel: zram: free secondary algorithms names

A flaw was found in the zram component of the Linux kernel. When a zram device with multiple streams is reset, the secondary algorithm names are not properly freed. This oversight leads to a memory leak, which a local attacker could potentially exploit to cause a Denial of Service DoS by exhausti...

SUSE CVE-2023-52932

In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices, the disksize of each zram device is 50MB with same priority as si. Us...

DEBIAN-CVE-2023-52932

In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: add condresched in getswappages The softlockup still occurs in getswappages under memory pressure. 64 CPU cores, 64GB memory, and 28 zram devices, the disksize of each zram device is 50MB with same priority as si. Us...