CVE-2025-21671

In the Linux kernel, the following vulnerability has been resolved:

zram: fix potential UAF of zram table

If zram_meta_alloc failed early, it frees allocated zram->table without setting it NULL. Which will potentially cause zram_meta_free to access the table if user reset an failed and uninitialized device.

This vulnerability is rated as Moderate because exploitation requires local administrative privileges, such as root or the CAP_SYS_ADMIN capability, to initialize and reset zram devices. In typical Red Hat Enterprise Linux environments, zram is not enabled or configured by default. Furthermore, triggering the condition depends on an initial memory allocation failure during device setup followed by an explicit reset request, restricting the impact primarily to a local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.