CVE-2024-53222

A flaw was found in the Linux kernel's zram driver. This vulnerability can lead to a Denial of Service (DoS) by causing a system crash. During device initialization, a timing window allows a local user to access the device attributes through the sysfs interface before compression algorithms are properly initialized, triggering a NULL pointer dereference.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the kernel from loading the zram module on systems where compressed in-memory block devices are not required.

1. Add a modprobe configuration file to prevent loading the module:

echo "install zram /bin/true" > /etc/modprobe.d/zram.conf

2. If the module is already loaded and not actively backing any devices, unload it:

modprobe -r zram

Caveats: Blacklisting this module disables zram compressed swap functionality. If zram devices are actively configured, unloading the module will fail or disrupt swap operations, and a system restart may be required to apply the change.