CVE-2026-46089

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-27 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported by Qu Wenruo and Avinesh Kumar, the following getconf PAGESIZE 65536 blkdiscard -p 4k /dev/zram0 takes literally forever to complete. zram doesn't support partial discards and just returns immediately w/o doing any discard work in such cases. The problem is that we forget to endio on our way out, so blkdiscard sleeps forever in submit_bio_wait(). Fix this by jumping to end_bio label, which does bio_endio().

Affected Software (7)

VendorProductVersion
Linux Linux 0120dd6e4e202e19a0e011e486fb2da40a5ea279 < 2d1f18efccdb8b29552399d024c36b705447e975
Linux Linux 0120dd6e4e202e19a0e011e486fb2da40a5ea279 < 35d3300f6357cfaa72db2721dc2b345b19bac5df
Linux Linux 0120dd6e4e202e19a0e011e486fb2da40a5ea279 < a02363f71a79b755daa78a70d6b217f9c13c8c85
Linux Linux 0120dd6e4e202e19a0e011e486fb2da40a5ea279 < 68ce397e8236088fc53b9532d383a722288c8194
Linux Linux 0120dd6e4e202e19a0e011e486fb2da40a5ea279 < e3668b371329ea036ff022ce8ecc82f8befcf003
Linux Linux 6.4
linux linux_kernel 6.4 – 6.6.140

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001350
Percentile 3.1%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00135
2026-11-12
0.00135
2026-11-10
0.00135
2026-11-09
0.00135
2026-11-08
0.00135
2026-11-07
0.00135
2026-11-06
0.00135

Intelligence Sources

mitre ref →
nvd ref →