CVE-2026-89717 zram: set default primary compressor in zram_destroy_comps()

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zramdestroycomps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUGON in zlib code due to missing winbits rang...

CVE-2026-89717

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zramdestroycomps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUGON in zlib code due to missing winbits rang...

CVE-2026-89716 zram: validate deflate params

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

CVE-2026-89716 zram: validate deflate params

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

EUVD-2026-76628

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

CVE-2026-89716

CVE-2026-89716 affects the Linux kernel's zram module. User-supplied deflate winbits are passed to zlib_deflate_workspacesize() without validation; if the value falls outside the valid range, a BUG_ON() is triggered, resulting in a kernel bug/panic. The fix validates the winbits parameter before ...

CVE-2026-89716

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

PT-2026-90435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the zram module. The read block state function calculates the nr pages variable before acquiring the dev lock. If the device is reset and...

CVE-2026-89716: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlibdeflateworkspacesize, which triggers BUGON if winbits value is outside of valid ranges...

PT-2026-90433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zram module where the zram destroy comps function resets all compressors to NULL, including the primary one. This creates an invalid device state because the strcm...

PT-2026-96358

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writeback store Patch series "zram: fix stale scan bounds after reinitialization". Both writeback store and read block state derive their table scan bounds from zram-disksize before acquiring dev...

CVE-2026-89718: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writebackstore Patch series "zram: fix stale scan bounds after reinitialization". Both writebackstore and readblockstate derive their table scan bounds from zram-disksize before acquiring devlock...

CVE-2026-89719: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in readblockstate readblockstate calculates nrpages before taking devlock. If the device is reset and reinitialized with a smaller disksize before lock acquisition, nrpages still describes the old...

PT-2026-96594

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in read block state read block state calculates nr pages before taking dev lock. If the device is reset and reinitialized with a smaller disksize before lock acquisition, nr pages still describes th...

PT-2026-90434

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the zram module. The functions writeback store and read block state derive table scan bounds from the zram-disksize variable before acquiring the...

CVE-2026-89717: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zramdestroycomps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUGON in zlib code due to missing winbits rang...

PT-2026-96487

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram destroy comps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUG ON in zlib code due to missing winbits...

PT-2026-90432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zram module where user-supplied deflate parameters are not properly validated. Specifically, the winbits variable is passed to the zlib deflate workspacesize...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: zram: fix use-after-free in zram_bvec_write_partial()

A flaw was found in the Linux kernel, specifically within the zram module. This vulnerability is a use-after-free error, where the system attempts to use a piece of memory after it has been freed. This occurs when the zrambvecwritepartial function allows an asynchronous read to write into a page...