Description
A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux Kernel | kernel | before 5.8-rc6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.7.10-1 | — |
| Debian 13 | linux | 5.7.10-1 | — |
| Debian 12 | linux | 5.7.10-1 | — |
| Debian 9 | linux-4.19 | 4.19.146-1~deb9u1 | DLA-2385-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-45.49 | USN-4483-1 |
| Ubuntu 20.04 LTS | linux-aws +2 | 5.4.0-1022.22 | USN-4483-1 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1023.23 | USN-4483-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1021.21 | USN-4483-1 |
| Ubuntu 20.04 LTS | linux-oem-5.6 | 5.6.0-1053.57 | — |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1016.17 | USN-4483-1 |
| Ubuntu 20.04 LTS | linux-raspi2 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv | 5.4.0-31.35 | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-115.116 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1080.84 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-aws-5.4 +2 | 5.4.0-1022.22~18.04.1 | USN-4483-1 |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1093.103 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-azure-5.4 | 5.4.0-1023.23~18.04.1 | USN-4483-1 |
| Ubuntu 18.04 LTS | linux-gcp +11 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1081.92 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-gke-4.15 | 4.15.0-1067.70 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-hwe-5.4 | 5.4.0-45.49~18.04.2 | USN-4483-1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1072.73 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-oem | 4.15.0-1094.104 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1051.55 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-raspi-5.4 | 5.4.0-1016.17~18.04.1 | USN-4483-1 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1068.72 | USN-4485-1 |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1084.92 | USN-4485-1 |
| Ubuntu 16.04 LTS | linux-aws-hwe | 4.15.0-1080.84~16.04.1 | USN-4485-1 |
| Ubuntu 16.04 LTS | linux-azure | 4.15.0-1093.103~16.04.1 | USN-4485-1 |
| Ubuntu 16.04 LTS | linux-gcp | 4.15.0-1081.92~16.04.1 | USN-4485-1 |
| Ubuntu 16.04 LTS | linux-hwe | 4.15.0-115.116~16.04.1 | USN-4485-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu 16.04 LTS | linux-oracle | 4.15.0-1051.55~16.04.1 | USN-4485-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | linux-aws-fips +2 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-aws-fips +2 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1069.73+fips2 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1073.76+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1067.71~20.04.1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2025.25 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2007.8 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1039.44 | — |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1093.103~14.04.1 | USN-4485-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | kernel-azure +2 | 5.3.18-18.12.1 | SUSE-SU-2020:2102-1 |
| SLES 15 SP2 | kernel-default-base | 5.3.18-24.9.1.9.2.6 | SUSE-SU-2020:2105-1 |
| SLES 15 SP2 | kernel-docs | 5.3.18-24.9.2 | SUSE-SU-2020:2105-1 |
| SLES 15 SP2 | kernel-syms +4 | 5.3.18-24.9.1 | SUSE-SU-2020:2105-1 |
| SLES 15 SP1 | kernel-azure +2 | 4.12.14-8.38.1 | SUSE-SU-2020:2103-1 |
| SLES 15 SP1 | kernel-docs +5 | 4.12.14-197.48.1 | SUSE-SU-2020:2107-1 |
| SLES 15 | kernel-docs +6 | 4.12.14-150.66.1 | SUSE-SU-2021:0438-1 |
| SLES 12 SP5 | kernel-azure +2 | 4.12.14-16.22.1 | SUSE-SU-2020:2119-1 |
| SLES 12 SP5 | kernel-docs +4 | 4.12.14-122.29.1 | SUSE-SU-2020:2122-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 | kernel-docs +5 | 4.12.14-150.66.1 | SUSE-SU-2021:0438-1 |
| SLES for SAP 12 SP5 | kernel-azure +2 | 4.12.14-16.22.1 | SUSE-SU-2020:2119-1 |
| SLES for SAP 12 SP5 | kernel-syms +2 | 4.12.14-122.29.1 | SUSE-SU-2020:2122-1 |
| SLE Real Time 12 SP5 | kernel-rt +3 | 4.12.14-10.13.1 | SUSE-SU-2020:2478-1 |
| SLE Live Patching 15 SP2 | kernel-default | 5.3.18-24.9.1 | SUSE-SU-2020:2105-1 |
| SLE Live Patching 15 SP2 | kernel-livepatch-SLE15-SP2_Update_1 | 1-5.3.6 | SUSE-SU-2020:2105-1 |
| SLE Live Patching 15 SP1 | kernel-default | 4.12.14-197.48.1 | SUSE-SU-2020:2107-1 |
| SLE Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_13 | 1-3.3.1 | SUSE-SU-2020:2107-1 |
| SLE Live Patching 15 | kernel-default | 4.12.14-150.66.1 | SUSE-SU-2021:0438-1 |
| SLE Live Patching 15 | kernel-livepatch-SLE15_Update_22 | 1-1.3.1 | SUSE-SU-2021:0438-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.29.1 | SUSE-SU-2020:2122-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_7 | 1-8.3.1 | SUSE-SU-2020:2122-1 |
| SLE HPC 15 | kernel-docs +5 | 4.12.14-150.66.1 | SUSE-SU-2021:0438-1 |
| SUSE Real Time Module 15 SP1 | kernel-rt +3 | 4.12.14-14.28.1 | SUSE-SU-2020:2487-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.2 | bbswitch | 0.8-lp152.6.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | crash | 7.2.8-lp152.3.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | dpdk | 19.11.1-lp152.2.5.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | drbd | 9.0.22~1+git.fe2b5983-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | hdjmod | 1.28-lp152.6.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | kernel-docs +8 | 5.3.18-lp152.36.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | kernel-rt +3 | 5.3.18-lp152.3.5.1 | openSUSE-SU-2021:0242-1 |
| openSUSE Leap 15.2 | mhvtl | 1.62-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | openafs | 1.8.5-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | pcfclock | 0.44-lp152.4.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | rtl8812au | 5.6.4.2+git20200318.49e98ff-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | sysdig | 0.26.5-lp152.3.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | v4l2loopback | 0.12.5-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | vhba-kmp | 20200106-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | virtualbox | 6.1.10-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.2 | xtables-addons | 3.9-lp152.2.2.1 | openSUSE-SU-2020:1236-1 |
| openSUSE Leap 15.1 | kernel-docs +8 | 4.12.14-lp151.28.59.1 | openSUSE-SU-2020:1153-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | kernel-livepatch-4.14.192-147.314 | 1.0-0.amzn2 | ALAS2-2020-1480 |
| Amazon Linux 2 | perf +8 | 4.14.192-147.314.amzn2 | ALAS2-2020-1480 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | perf +10 | 4.14.35-1902.306.2.el7uek | ELSA-2020-5885, ELSA-2020-5848, ELSA-2020-5845 |
Advisories 20
- USN-4485-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- USN-4483-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- DLA-2385-1 linux-4.19 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2020:2105-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1153-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:0242-1 Security update for RT kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1236-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2119-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2487-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2107-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2122-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2102-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2478-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2103-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:0438-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2020-1480 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 19, 2024
- ELSA-2020-5885 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 12, 2020
- ELSA-2020-5848 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Sep 14, 2020
- ELSA-2020-5844 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Sep 11, 2020
- ELSA-2020-5845 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Sep 11, 2020
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=853eab68afc80f59f36bbdeb715e5c88c501e680
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10781
- https://www.openwall.com/lists/oss-security/2020/06/18/1
- [debian-lts-announce] 20200928 [SECURITY] [DLA 2385-1] linux-4.19 security update mailing-list