zram: set default primary compressor in zram_destroy_comps()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12, 6.12.111, 6.18.51, 7.2.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps() Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported [1] a couple of zram issues: a possible BUG_ON() in zlib code due to missing winbits range validation and one possible NULL-ptr dereference in zcomp. Both are low risk yet still worth fixing. This patch (of 2): zram_destroy_comps() resets all compressors and leaves them set to NULL, including the primary one, which is invalid device state, as now comp_algorithm_show()->strcmp() can be called on a NULL compressor. Set default primary compressor in zram_destroy_comps().
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 6e20720b12299595154857fa98222729f0d5823c · fixed in a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5; From 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 · fixed in 4bf3328eeec9afc2a55632ff47fc18101ea62d73; From 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 · fixed in 5cec3e60e9f2d1324179df3aa91656f90095cf8f; From 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 · fixed in dea8f13c3dfad8b990f8ea96c997aabeebbc1d22; From 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 · fixed in dde75313eed0b014c437f48dd75c0308b592cbf9; From 6.6.57 · fixed in 6.6.160; From 6.11.4 · fixed in 6.12
- Linux Linux
6.12
- KernelLinux
fixed in 6.6.160; From 6.7.0 · fixed in 6.12.111; From 6.12.0 · fixed in 6.18.51; From 6.13.0 · fixed in 7.2.4