# zram: set default primary compressor in zram_destroy_comps()

CVE record · `CVE-2026-89717`

- **Identifiers:** `CVE-2026-89717`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 11 Sept 2026
- **Updated:** 21 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `6e20720b12299595154857fa98222729f0d5823c to before a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5` (git)
  - affected: `486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to before 4bf3328eeec9afc2a55632ff47fc18101ea62d73` (git)
  - affected: `486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to before 5cec3e60e9f2d1324179df3aa91656f90095cf8f` (git)
  - affected: `486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to before dea8f13c3dfad8b990f8ea96c997aabeebbc1d22` (git)
  - affected: `486fd58af7ac1098b68370b1d4d9f94a2a1c7124 to before dde75313eed0b014c437f48dd75c0308b592cbf9` (git)
  - affected: `c4e5683c3031a33dc46954e99d37cbd2f706cdb6` (git)
  - affected: `6.6.57 to before 6.6.160` (semver)
  - affected: `6.11.4 to before 6.12` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `6.12`
  - unaffected: `before 6.12` (semver)
  - unaffected: `6.6.160 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.111 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.51 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.4 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0017, the 6th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-89717](https://www.cve.org/CVERecord?id=CVE-2026-89717)
- [NVD: CVE-2026-89717](https://nvd.nist.gov/vuln/detail/CVE-2026-89717)

### References from the CNA

- <https://git.kernel.org/stable/c/a5fda7def04d98ab7c5cbb2394714fb1f8c56cb5>
- <https://git.kernel.org/stable/c/4bf3328eeec9afc2a55632ff47fc18101ea62d73>
- <https://git.kernel.org/stable/c/5cec3e60e9f2d1324179df3aa91656f90095cf8f>
- <https://git.kernel.org/stable/c/dea8f13c3dfad8b990f8ea96c997aabeebbc1d22>
- <https://git.kernel.org/stable/c/dde75313eed0b014c437f48dd75c0308b592cbf9>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-89717>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-89717/>. Everything for agents: <https://agentprime.io/llms.txt>.