VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 25, 2026· Updated Sep 9, 2026

CVE-2026-53185

CVE-2026-53185

Description

In the Linux kernel, the following vulnerability has been resolved:

zram: fix use-after-free in zram_bvec_write_partial()

zram_read_page() picks the sync or async backing device read path based on whether the parent bio is NULL. zram_bvec_write_partial() passes its parent bio down, so for ZRAM_WB slots the read is dispatched asynchronously and zram_read_page() returns 0 while the bio is still in flight. The caller then runs memcpy_from_bvec(), zram_write_page() and __free_page() on the buffer, leaving the async read to write into a freed page.

zram_bvec_read_partial() was switched to NULL in commit 4e3c87b9421d ("zram: fix synchronous reads") for the same reason; the write_partial counterpart was missed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

111

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.