CVE-2026-90043

High

Description

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot lock bit position on big-endian 64-bit The slot lock is a bit operation on the whole __lock word, which flags and ac_time alias as two u32s. On little-endian the lock bit lands in the position ZRAM_ENTRY_LOCK reserves in flags, so the aliasing works out. On 64-bit big-endian it lands in ac_time instead: with ZRAM_TRACK_ENTRY_ACTIME enabled, storing the access time from mark_slot_accessed() or slot_free() wipes out the held lock bit, letting another CPU take the same slot lock; an access time value with that bit set makes the slot look locked forever. Shift the lock bit into the flags half of the word on big-endian 64-bit.

SeverityHigh
CVSS7.8
Exploit probability6. percentile0.2%
ProductLinux
PublishedSep 16, 2026
First seenSep 16, 2026

How to fix

Update
  • Linux Linux052b6b2d5fe97547bd2cdb73fa894f6cfea68b11, a8b5875741d416703e19ad8eeac6fce8a12bd6e4 or later

Affected products

ProductAffected versionsFixed in
Linux Linux2e8ff2f51dde73a26b94aed2df4827177bd25e6e ≤ v < 052b6b2d5fe97547bd2cdb73fa894f6cfea68b11, 2e8ff2f51dde73a26b94aed2df4827177bd25e6e ≤ v < a8b5875741d416703e19ad8eeac6fce8a12bd6e4, 7.0052b6b2d5fe97547bd2cdb73fa894f6cfea68b11, a8b5875741d416703e19ad8eeac6fce8a12bd6e4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.