Type Confusion Vulnerability in Linux Kernel Affecting Big-Endian Systems

CVE-2026-90043

What is CVE-2026-90043?

A vulnerability has been identified in the Linux kernel that affects how the zram module handles locking on big-endian 64-bit systems. The issue arises from improper bit manipulation regarding slot locks, where the lock bit is incorrectly positioned. This discrepancy allows for potential race conditions where another CPU could mistakenly access a locked slot, leading to erroneous behaviors in memory handling. The vulnerability has been addressed by shifting the lock bit into the correct position within the flags field, ensuring proper synchronization and operation across CPUs.

References