Back to CVE records
Not yet scoredPublished Sep 11, 2026
CVE-2026-89716zram: validate deflate params
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: zram: validate deflate params We must validate user-supplied deflate winbits before we pass it to zlib_deflate_workspacesize(), which triggers BUG_ON() if winbits value is outside of valid ranges.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from dc75a0d93bd5a1c64104efb4ec680463afbdd755 before 923578d0f0d0703c3db61ab35dc37075ae53b0bd; from dc75a0d93bd5a1c64104efb4ec680463afbdd755 before e23fac4ab2a5728386477b98a402a1042b21bffb; from dc75a0d93bd5a1c64104efb4ec680463afbdd755 before ec7607ac4717ff521c9c1e9d8271c26293345513 | CNA record |
References
- https://git.kernel.org/stable/c/923578d0f0d0703c3db61ab35dc37075ae53b0bd
- https://git.kernel.org/stable/c/e23fac4ab2a5728386477b98a402a1042b21bffb
- https://git.kernel.org/stable/c/ec7607ac4717ff521c9c1e9d8271c26293345513
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.