CVE-2026-46089

zram: do not forget to endio for partial discard requests

MEDIUM
5.5
CVSS Score
Published: May 27, 2026 at 12:58 PM UTC
Updated: June 27, 2026 at 11:41 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported by Qu Wenruo and Avinesh Kumar, the following getconf PAGESIZE 65536 blkdiscard -p 4k /dev/zram0 takes literally forever to complete. zram doesn't support partial discards and just returns immediately w/o doing any discard work in such cases. The problem is that we forget to endio on our way out, so blkdiscard sleeps forever in submit_bio_wait(). Fix this by jumping to end_bio label, which does bio_endio().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.13 ≤ v < 6.18.276.19 ≤ v < 7.0.46.4 ≤ v < 6.12.866.4 ≤ v < 6.18.276.4 ≤ v < 6.6.1406.4 ≤ v < 7.0.46.4 ≤ v < 7.16.7 ≤ v < 6.12.86120dd6e4e202e19a0e11e486fb2da40a5ea2796.4
Vendor states this is fixed in 2d1f18efccdb8b29552399d024c36b705447e975 (fixed)
Vendor states this is fixed in 35d3300f6357cfaa72db2721dc2b345b19bac5df (fixed)
Vendor states this is fixed in 68ce397e8236088fc53b9532d383a722288c8194 (fixed)
Vendor states this is fixed in a02363f71a79b755daa78a70d6b217f9c13c8c85 (fixed)
Vendor states this is fixed in e3668b371329ea036ff022ce8ecc82f8befcf003 (fixed)
Vendor states this is fixed in 6.12.86 (unaffected)
Vendor states this is fixed in 6.18.27 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)
Vendor states this is fixed in 6.6.140 (unaffected)
Vendor states this is fixed in 7.0.4 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card