CVE-2026-63951
kernel: zram: fix use-after-free in zram_writeback_endio
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's zram module. A race condition exists in the zram_writeback_endio function, which handles writeback completions. This race condition can lead to a use-after-free vulnerability, causing a system crash and resulting in a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference