Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-89717

zram: set default primary compressor in zram_destroy_comps()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps() Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported [1] a couple of zram issues: a possible BUG_ON() in zlib code due to missing winbits range validation and one possible NULL-ptr dereference in zcomp. Both are low risk yet still worth fixing. This patch (of 2): zram_destroy_comps() resets all compressors and leaves them set to NULL, including the primary one, which is invalid device state, as now comp_algorithm_show()->strcmp() can be called on a NULL compressor. Set default primary compressor in zram_destroy_comps().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6e20720b12299595154857fa98222729f0d5823c to < a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5affected
  • 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to < 4bf3328eeec9afc2a55632ff47fc18101ea62d73affected
  • 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to < 5cec3e60e9f2d1324179df3aa91656f90095cf8faffected
  • 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to < dea8f13c3dfad8b990f8ea96c997aabeebbc1d22affected
  • 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to < dde75313eed0b014c437f48dd75c0308b592cbf9affected
  • c4e5683c3031a33dc46954e99d37cbd2f706cdb6affected
  • 6.6.57 to < 6.6.160affected
  • 6.11.4 to < 6.12affected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.4 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References