https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:54:24 +0000 https://vulnerability.circl.lu/vuln/cve-2026-53185 <p><strong>Affected:</strong> Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>zram: fix use-after-free in zram_bvec_write_partial()</p> <p>zram_read_page() picks the sync or async backing device read path based on whether the parent bio is NULL. zram_bvec_write_partial() passes its parent bio down, so for ZRAM_WB slots the read is dispatched asynchronously and zram_read_page() returns 0 while the bio is still in flight. The caller then runs memcpy_from_bvec(), zram_write_page() and __free_page() on the buffer, leaving the async read to write into a freed page.</p> <p>zram_bvec_read_partial() was switched to NULL in commit 4e3c87b9421d (&#34;zram: fix synchronous reads&#34;) for the same reason; the write_partial counterpart was missed.</p> <p><strong>Affected:</strong> Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>zram: fix use-after-free in zram_bvec_write_partial()</p> <p>zram_read_page() picks the sync or async backing device read path based on whether the parent bio is NULL. zram_bvec_write_partial() passes its parent bio down, so for ZRAM_WB slots the read is dispatched asynchronously and zram_read_page() returns 0 while the bio is still in flight. The caller then runs memcpy_from_bvec(), zram_write_page() and __free_page() on the buffer, leaving the async read to write into a freed page.</p> <p>zram_bvec_read_partial() was switched to NULL in commit 4e3c87b9421d (&#34;zram: fix synchronous reads&#34;) for the same reason; the write_partial counterpart was missed.</p> https://vulnerability.circl.lu/vuln/cve-2026-53185