GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-46089 (GCVE-0-2026-46089)

Vulnerability from cvelistv5 – Published: 2026-05-27 12:58 – Updated: 2026-06-14 17:53
VLAI
Title
zram: do not forget to endio for partial discard requests
Summary
In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported by Qu Wenruo and Avinesh Kumar, the following getconf PAGESIZE 65536 blkdiscard -p 4k /dev/zram0 takes literally forever to complete. zram doesn't support partial discards and just returns immediately w/o doing any discard work in such cases. The problem is that we forget to endio on our way out, so blkdiscard sleeps forever in submit_bio_wait(). Fix this by jumping to end_bio label, which does bio_endio().
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0120dd6e4e202e19a0e011e486fb2da40a5ea279 , < 2d1f18efccdb8b29552399d024c36b705447e975 (git)
Affected: 0120dd6e4e202e19a0e011e486fb2da40a5ea279 , < 35d3300f6357cfaa72db2721dc2b345b19bac5df (git)
Affected: 0120dd6e4e202e19a0e011e486fb2da40a5ea279 , < a02363f71a79b755daa78a70d6b217f9c13c8c85 (git)
Affected: 0120dd6e4e202e19a0e011e486fb2da40a5ea279 , < 68ce397e8236088fc53b9532d383a722288c8194 (git)
Affected: 0120dd6e4e202e19a0e011e486fb2da40a5ea279 , < e3668b371329ea036ff022ce8ecc82f8befcf003 (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.4
Unaffected: 0 , < 6.4 (semver)
Unaffected: 6.6.140 , ≤ 6.6.* (semver)
Unaffected: 6.12.86 , ≤ 6.12.* (semver)
Unaffected: 6.18.27 , ≤ 6.18.* (semver)
Unaffected: 7.0.4 , ≤ 7.0.* (semver)
Unaffected: 7.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/block/zram/zram_drv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2d1f18efccdb8b29552399d024c36b705447e975",
              "status": "affected",
              "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
              "versionType": "git"
            },
            {
              "lessThan": "35d3300f6357cfaa72db2721dc2b345b19bac5df",
              "status": "affected",
              "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
              "versionType": "git"
            },
            {
              "lessThan": "a02363f71a79b755daa78a70d6b217f9c13c8c85",
              "status": "affected",
              "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
              "versionType": "git"
            },
            {
              "lessThan": "68ce397e8236088fc53b9532d383a722288c8194",
              "status": "affected",
              "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
              "versionType": "git"
            },
            {
              "lessThan": "e3668b371329ea036ff022ce8ecc82f8befcf003",
              "status": "affected",
              "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/block/zram/zram_drv.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.4"
            },
            {
              "lessThan": "6.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.86",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.27",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.*",
              "status": "unaffected",
              "version": "7.0.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.140",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.86",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.27",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0.4",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: do not forget to endio for partial discard requests\n\nAs reported by Qu Wenruo and Avinesh Kumar, the following\n\n getconf PAGESIZE\n 65536\n blkdiscard -p 4k /dev/zram0\n\ntakes literally forever to complete.  zram doesn\u0027t support partial\ndiscards and just returns immediately w/o doing any discard work in such\ncases.  The problem is that we forget to endio on our way out, so\nblkdiscard sleeps forever in submit_bio_wait().  Fix this by jumping to\nend_bio label, which does bio_endio()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-14T17:53:34.164Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/2d1f18efccdb8b29552399d024c36b705447e975"
        },
        {
          "url": "https://git.kernel.org/stable/c/35d3300f6357cfaa72db2721dc2b345b19bac5df"
        },
        {
          "url": "https://git.kernel.org/stable/c/a02363f71a79b755daa78a70d6b217f9c13c8c85"
        },
        {
          "url": "https://git.kernel.org/stable/c/68ce397e8236088fc53b9532d383a722288c8194"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3668b371329ea036ff022ce8ecc82f8befcf003"
        }
      ],
      "title": "zram: do not forget to endio for partial discard requests",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46089",
    "datePublished": "2026-05-27T12:58:32.606Z",
    "dateReserved": "2026-05-13T15:03:33.096Z",
    "dateUpdated": "2026-06-14T17:53:34.164Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-46089",
      "date": "2026-09-20",
      "epss": "0.00135",
      "percentile": "0.03363"
    },
    "microsoft_vex": {
      "current_release_date": "2026-06-09T14:39:46.000Z",
      "cve": "CVE-2026-46089",
      "id": "msrc_CVE-2026-46089",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "zram: do not forget to endio for partial discard requests",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46089.json",
      "version": "3"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/block/zram/zram_drv.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "2d1f18efccdb8b29552399d024c36b705447e975",
                    "status": "affected",
                    "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "35d3300f6357cfaa72db2721dc2b345b19bac5df",
                    "status": "affected",
                    "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a02363f71a79b755daa78a70d6b217f9c13c8c85",
                    "status": "affected",
                    "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "68ce397e8236088fc53b9532d383a722288c8194",
                    "status": "affected",
                    "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e3668b371329ea036ff022ce8ecc82f8befcf003",
                    "status": "affected",
                    "version": "0120dd6e4e202e19a0e011e486fb2da40a5ea279",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/block/zram/zram_drv.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.4"
                  },
                  {
                    "lessThan": "6.4",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.140",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.86",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.27",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.0.*",
                    "status": "unaffected",
                    "version": "7.0.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FA2B001B-CDB2-4EF3-8FCE-74CFF813CACD",
                    "versionEndExcluding": "6.6.140",
                    "versionStartIncluding": "6.4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55DA1C62-9991-451E-B8A8-E0004E00F789",
                    "versionEndExcluding": "6.12.86",
                    "versionStartIncluding": "6.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A10AC84F-C058-47D5-85B4-E6E51A613B74",
                    "versionEndExcluding": "6.18.27",
                    "versionStartIncluding": "6.13",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3",
                    "versionEndExcluding": "7.0.4",
                    "versionStartIncluding": "6.19",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: do not forget to endio for partial discard requests\n\nAs reported by Qu Wenruo and Avinesh Kumar, the following\n\n getconf PAGESIZE\n 65536\n blkdiscard -p 4k /dev/zram0\n\ntakes literally forever to complete.  zram doesn\u0027t support partial\ndiscards and just returns immediately w/o doing any discard work in such\ncases.  The problem is that we forget to endio on our way out, so\nblkdiscard sleeps forever in submit_bio_wait().  Fix this by jumping to\nend_bio label, which does bio_endio()."
          }
        ],
        "id": "CVE-2026-46089",
        "lastModified": "2026-06-25T21:15:15.117",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2026-05-27T14:17:30.443",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/2d1f18efccdb8b29552399d024c36b705447e975"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/35d3300f6357cfaa72db2721dc2b345b19bac5df"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/68ce397e8236088fc53b9532d383a722288c8194"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/a02363f71a79b755daa78a70d6b217f9c13c8c85"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e3668b371329ea036ff022ce8ecc82f8befcf003"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-27T16:20:37+00:00",
      "cve": "CVE-2026-46089",
      "id": "CVE-2026-46089",
      "initial_release_date": "2026-05-27T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: zram: do not forget to endio for partial discard requests",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46089.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:12:36Z",
      "cve": "CVE-2026-46089",
      "id": "CVE-2026-46089",
      "initial_release_date": "2026-05-28T03:52:51Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "424",
      "product_status:known_not_affected": "279",
      "product_status:recommended": "254",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-46089",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46089.json",
      "version": "15"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.