Threats tagged 'ghsa-7792-f3h4-qxjq'

CVE-2025-21671 is a use-after-free vulnerability in the Linux kernel's zram component. The flaw occurs when zram_meta_alloc fails early and frees the allocated zram->table without setting its pointer to NULL. This can lead to zram_meta_free accessing freed memory if a user resets a failed and uninitialized device. The vulnerability has a high severity with a CVSS score of 7.8.