CVE-2024-26869CWE-362

CVE-2024-26869

High · published April 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to truncate meta inode pages forcely

Below race case can cause data corruption:

Thread A GC thread

- gc_data_segment

- ra_data_block

- locked meta_inode page

- f2fs_inplace_write_data

- invalidate_mapping_pages

: fail to invalidate meta_inode page

due to lock failure or dirty|writeback

status

- f2fs_submit_page_bio

: write last dirty data to old blkaddr

- move_data_block

- load old data from meta_inode page

- f2fs_submit_page_write

: write old data to new blkaddr

Because invalidate_mapping_pages() will skip invalidating page which

has unclear status including locked, dirty, writeback and so on, so

we need to use truncate_inode_pages_range() instead of

invalidate_mapping_pages() to make sure meta_inode page will be dropped.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00181 · 7.3th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-04-17T15:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19, < 6.6.236.6.23
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
linux/linux_kernel≥ 6.8, < 6.8.26.8.2
References (8)
EPSS history
Timeline
  • 17 APR 10:27Z
    f2fs: fix to truncate meta inode pages forcely
    cvelistv5