Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-89716

zram: validate deflate params

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlib_deflate_workspacesize(), which triggers BUG_ON() if winbits value is outside of valid ranges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dc75a0d93bd5a1c64104efb4ec680463afbdd755 to < 923578d0f0d0703c3db61ab35dc37075ae53b0bdaffected
  • dc75a0d93bd5a1c64104efb4ec680463afbdd755 to < e23fac4ab2a5728386477b98a402a1042b21bffbaffected
  • dc75a0d93bd5a1c64104efb4ec680463afbdd755 to < ec7607ac4717ff521c9c1e9d8271c26293345513affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.50 to ≤ 6.18.*unaffected
  • 7.2.4 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References