CVE-2026-46089

Updated on 27 May 2026

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported by Qu Wenruo and Avinesh Kumar, the following getconf PAGESIZE 65536 blkdiscard -p 4k /dev/zram0 takes literally forever to complete. zram doesn’t support partial discards and just returns immediately w/o doing any discard work in such cases. The problem is that we forget to endio on our way out, so blkdiscard sleeps forever in submit_bio_wait(). Fix this by jumping to end_bio label, which does bio_endio(). A flaw was found in the Linux kernel’s zram module. This vulnerability allows a local user to cause a system hang, leading to a Denial of Service (DoS). The issue occurs because the zram module fails to properly handle partial discard requests, specifically by not calling endio when such requests are made. This oversight causes the blkdiscard utility to wait indefinitely, effectively freezing the system.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Released
6 kernels
  • 6.12.85-1
  • 6.12.73-1
  • 6.12.63-1
  • 6.12.74-1
  • 6.12.69-1
  • 6.12.74-2
Ubuntu 24.04 Planned