In the Linux kernel, the following vulnerability has been resolved:
PM: hibernate: Fix crash when freeing invalid crypto compressor
When crypto_alloc_acomp() fails, it returns an ERR_PTR value, not NULL.
The cleanup code in save_compressed_image() and load_compressed_image() unconditionally calls crypto_free_acomp() without checking for ERR_PTR, which causes crypto_acomp_tfm() to dereference an invalid pointer and crash the kernel.
This can be triggered when the compression algorithm is unavailable (e.g., CONFIG_CRYPTO_LZO not enabled).
Fix by adding IS_ERR_OR_NULL() checks before calling crypto_free_acomp() and acomp_request_free(), similar to the existing kthread_stop() check.
[ rjw: Added 2 empty code lines ]
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 4, 2026 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04cUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-oem-24.04Upgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-azure-fde-6.17Upgrade linux-image-oracleUpgrade linux-image-nvidia-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub