CVE-2026-89716

Summary

In the Linux kernel, the following vulnerability has been resolved:

zram: validate deflate params

We must validate user-supplied deflate winbits before we pass it to zlib_deflate_workspacesize(), which triggers BUG_ON() if winbits value is outside of valid ranges.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxdc75a0d93bd5a1c64104efb4ec680463afbdd755 < 923578d0f0d0703c3db61ab35dc37075ae53b0bdaffected
LinuxLinuxdc75a0d93bd5a1c64104efb4ec680463afbdd755 < e23fac4ab2a5728386477b98a402a1042b21bffbaffected
LinuxLinuxdc75a0d93bd5a1c64104efb4ec680463afbdd755 < ec7607ac4717ff521c9c1e9d8271c26293345513affected
LinuxLinux6.16affected
LinuxLinux0 < 6.16unaffected
LinuxLinux6.18.50 <= 6.18.*unaffected
LinuxLinux7.2.4 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References