Description
In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zram_meta_alloc failed early, it frees allocated zram->table without setting it NULL. Which will potentially cause zram_meta_free to access the table if user reset an failed and uninitialized device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ac3b5366b9b7c9d97b606532ceab43d2329a22f3 to < fe3de867f94819ba0f28e035c0b0182150147d95affected0b5b0b65561b34e6e360de317e4bcd031bfabf42 to < 571d3f6045cd3a6d9f6aec33b678f3ffe97582efaffected6fb92e9a52e3feae309a213950f21dfcd1eb0b40 to < 902ef8f16d5ca77edc77c30656be54186c1e99b7affected74363ec674cb172d8856de25776c8f3103f05e2f to < 212fe1c0df4a150fb6298db2cfff267ceaba5402affected
Linux Linux
Default version status: unaffected
6.1.122 to < 6.1.127affected6.6.68 to < 6.6.74affected6.12.7 to < 6.12.11affected
References
- https://git.kernel.org/stable/c/fe3de867f94819ba0f28e035c0b0182150147d95 ↗
- https://git.kernel.org/stable/c/571d3f6045cd3a6d9f6aec33b678f3ffe97582ef ↗
- https://git.kernel.org/stable/c/902ef8f16d5ca77edc77c30656be54186c1e99b7 ↗
- https://git.kernel.org/stable/c/212fe1c0df4a150fb6298db2cfff267ceaba5402 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗