CVE-2026-53185

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the zram bvec write partial() function. The zram read page() function determines whether to use a synchronous or asynchronous backing device read path based on whether the parent bio is NULL. Because zram bvec write partial() passes its parent bio, reads for ZRAM WB slots are dispatched asynchronously. This causes zram read page() to return 0 while the bio is still in flight, leading the caller to execute memcpy from bvec(), zram write page(), and free page() on the buffer. Consequently, the asynchronous read writes into a page that has already been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.