Riskcovery

CVE-2025-21671

zram: fix potential UAF of zram table

State
Published
Severity
7.8 High
Published
Jan 31, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

zram: fix potential UAF of zram table

If zram_meta_alloc failed early, it frees allocated zram->table without setting it NULL. Which will potentially cause zram_meta_free to access the table if user reset an failed and uninitialized device.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • ac3b5366b9b7c9d97b606532ceab43d2329a22f3 to before fe3de867f94819ba0f28e035c0b0182150147d95Affected
  • 0b5b0b65561b34e6e360de317e4bcd031bfabf42 to before 571d3f6045cd3a6d9f6aec33b678f3ffe97582efAffected
  • 6fb92e9a52e3feae309a213950f21dfcd1eb0b40 to before 902ef8f16d5ca77edc77c30656be54186c1e99b7Affected
  • 74363ec674cb172d8856de25776c8f3103f05e2f to before 212fe1c0df4a150fb6298db2cfff267ceaba5402Affected
LinuxLinux
  • 6.1.122 to before 6.1.127Affected
  • 6.6.68 to before 6.6.74Affected
  • 6.12.7 to before 6.12.11Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.