Description
In the Linux kernel, the following vulnerability has been resolved:
zram: set default primary compressor in zram_destroy_comps()
Patch series "zram: fix zram issues reported by sashiko".
Sashiko drove by and reported [1] a couple of zram issues: a possible BUG_ON() in zlib code due to missing winbits range validation and one possible NULL-ptr dereference in zcomp. Both are low risk yet still worth fixing.
This patch (of 2):
zram_destroy_comps() resets all compressors and leaves them set to NULL, including the primary one, which is invalid device state, as now comp_algorithm_show()->strcmp() can be called on a NULL compressor. Set default primary compressor in zram_destroy_comps().
Metrics
No CVSS score has been published yet.
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 6e20720b12299595154857fa98222729f0d5823c, < a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5; >= 486fd58af7ac1098b68370b1d4d9f94a2a1c7124, < 4bf3328eeec9afc2a55632ff47fc18101ea62d73; >= 486fd58af7ac1098b68370b1d4d9f94a2a1c7124, < 5cec3e60e9f2d1324179df3aa91656f90095cf8f; >= 486fd58af7ac1098b68370b1d4d9f94a2a1c7124, < dea8f13c3dfad8b990f8ea96c997aabeebbc1d22; >= 486fd58af7ac1098b68370b1d4d9f94a2a1c7124, < dde75313eed0b014c437f48dd75c0308b592cbf9; c4e5683c3031a33dc46954e99d37cbd2f706cdb6; >= 6.6.57, < 6.6.160; >= 6.11.4, < 6.12 |
| Linux | Linux | 6.12 |
References
- https://git.kernel.org/stable/c/4bf3328eeec9afc2a55632ff47fc18101ea62d73
- https://git.kernel.org/stable/c/5cec3e60e9f2d1324179df3aa91656f90095cf8f
- https://git.kernel.org/stable/c/a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5
- https://git.kernel.org/stable/c/dde75313eed0b014c437f48dd75c0308b592cbf9
- https://git.kernel.org/stable/c/dea8f13c3dfad8b990f8ea96c997aabeebbc1d22
Timeline
- Published
- Sep 11, 2026
- Last modified
- Oct 21, 2026
- NVD status
- Received