CVE-2026-46089
In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported by Qu Wenruo and Avinesh Kumar, the following getconf PAGESIZE 65536 blkdiscard -p 4k /dev/zram0 takes literally forever to complete. zram doesn't support partial discards and just returns immediately w/o doing any discard work in such cases. The problem is that we forget to endio on our way out, so blkdiscard sleeps forever in submit_bio_wait(). Fix this by jumping to end_bio label, which does bio_endio().
Affected versions
Linux kernel versions
6.4
and later are affected. Fixed in
6.6.140,
6.12.86,
6.18.27,
7.0.4,
7.1-rc1
and their respective stable series.
References
The following references provide additional information about CVE-2026-46089 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/2d1f18efccdb8b29552399d024c36b705447e975
-
PatchKernel patch commithttps://git.kernel.org/stable/c/35d3300f6357cfaa72db2721dc2b345b19bac5df
-
PatchKernel patch commithttps://git.kernel.org/stable/c/68ce397e8236088fc53b9532d383a722288c8194
Frequently asked questions
-
What is CVE-2026-46089?
CVE-2026-46089 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.4 onward and has been patched in 6.6.140, 6.12.86, 6.18.27 and others. CVE-2026-46089 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-46089?
Yes — CVE-2026-46089 has been patched. Fixed versions include 6.6.140, 6.12.86, 6.18.27 and others. If you are running Linux kernel 6.4 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-46089 actively exploited?
No — CVE-2026-46089 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.