CVE-2024-34027CWE-770denial-of-service

CVE-2024-34027

High · published June 24, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

to avoid racing with checkpoint, otherwise, filesystem metadata including

blkaddr in dnode, inode fields and .total_valid_block_count may be

corrupted after SPO case.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-06-24T18:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.8, < 5.10.2195.10.219
linux/linux_kernel≥ 5.11, < 5.15.1615.15.161
linux/linux_kernel≥ 5.16, < 6.1.936.1.93
linux/linux_kernel≥ 6.2, < 6.6.336.6.33
linux/linux_kernel≥ 6.7, < 6.9.46.9.4
References (13)
EPSS history
Timeline
  • 24 JUN 13:56Z
    f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
    cvelistv5