In the Linux kernel, allocated page table when a zram device is reset and reinitialized with a smaller disk size before acquiring the device lock. This out-of-bounds read may corrupt kernel data structures or trigger a kernel crash. The weakness is an out-of-bounds buffer access (CWE-805).

All Linux kernel installations that provide a zram compression device. Because no specific kernel version is mentioned, any kernel that loads the zram driver and permits resizing or resetting a zram device may be affected.

The CVSS score of 4.1 indicates low-to-moderate severity, and the EPSS score is less than 1%. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires the ability to reset or resize a zram device before the device lock is taken, so it is a local attack that needs permissions to modify zram parameters. Based on the description, it is inferred that a local privileged user or a process with sufficient rights could trigger the flaw, potentially leading to kernel memory corruption or a crash.