The Linux kernel's zram module did not properly validate the user-supplied deflate window bits (winbits) parameter before passing it to the function zlib_deflate_workspacesize(). This lack of validation could cause the kernel to trigger a BUG_ON() condition when an invalid winbits value was provided. The vulnerability has been addressed by adding proper validation of the winbits parameter to prevent invalid values from causing kernel crashes.

If exploited, this vulnerability could cause a kernel panic or crash due to the BUG_ON() triggered by invalid deflate winbits parameters. This could lead to denial of service on affected systems running the vulnerable Linux kernel versions. There is no indication of code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to validate the deflate winbits parameter before use, preventing invalid values from triggering kernel BUG_ON(). Users should update their Linux kernel to the fixed version once it is available. Patch status is not explicitly confirmed in the provided data; check the official Linux kernel advisories for the exact fixed versions and apply updates accordingly.