CVE-2024-53221

Summary

CVE-2024-53222: A vulnerability has been identified in the Linux kernel's zram module, where the function comp_algorithm_show() may dereference a NULL pointer. This issue was discovered when Kdump encountered a NULL pointer dereference during a cat command. The root cause is that zram->comp_algs[ZRAM_PRIMARY_COMP] can be NULL if comp_algorithm_set() has not been called before device_add_disk(). To mitigate this issue, comp_algorithm_set() should be called before allowing user access to the zram device through sysfs. No known exploits have been reported at this time.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.