CVE-2026-89717

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps() Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported [1] a couple of zram issues: a possible BUG_ON() in zlib code due to missing winbits range validation and one possible NULL-ptr dereference in zcomp. Both are low risk yet still worth fixing. This patch (of 2): zram_destroy_comps() resets all compressors and leaves them set to NULL, including the primary one, which is invalid device state, as now comp_algorithm_show()->strcmp() can be called on a NULL compressor. Set default primary compressor in zram_destroy_comps().

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 11, 2026
First seenSep 11, 2026

How to fix

Update
  • Linux Linuxa5fda7def04d98ab7c5cbb2394714fb1f8c56cb5, 4bf3328eeec9afc2a55632ff47fc18101ea62d73, 5cec3e60e9f2d1324179df3aa91656f90095cf8f, dea8f13c3dfad8b990f8ea96c997aabeebbc1d22, dde75313eed0b014c437f48dd75c0308b592cbf9, 6.6.160, 6.12 or later

Affected products

ProductAffected versionsFixed in
Linux Linux6e20720b12299595154857fa98222729f0d5823c ≤ v < a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5, 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 ≤ v < 4bf3328eeec9afc2a55632ff47fc18101ea62d73, 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 ≤ v < 5cec3e60e9f2d1324179df3aa91656f90095cf8f, 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 ≤ v < dea8f13c3dfad8b990f8ea96c997aabeebbc1d22, 486fd58af7ac1098b68370b1d4d9f94a2a1c7124 ≤ v < dde75313eed0b014c437f48dd75c0308b592cbf9, c4e5683c3031a33dc46954e99d37cbd2f706cdb6, 6.6.57 ≤ v < 6.6.160, 6.11.4 ≤ v < 6.12, 6.12a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5, 4bf3328eeec9afc2a55632ff47fc18101ea62d73, 5cec3e60e9f2d1324179df3aa91656f90095cf8f, dea8f13c3dfad8b990f8ea96c997aabeebbc1d22, dde75313eed0b014c437f48dd75c0308b592cbf9, 6.6.160, 6.12

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-89717 · Linux · Dark Radar