CVE-2024-47726

CVE-2024-47726

High · published October 21, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to wait dio completion

It should wait all existing dio write IOs before block removal,

otherwise, previous direct write IO may overwrite data in the

block which may be reused by other inode.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Published
2024-10-21T17:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.11.26.11.2
References (8)
https://git.kernel.org/stable/c/3aa5254d80969cb576601fb9fec7a188cc8dc169 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7be13b73409b553d9d9a6cbb042b4d19e2631cc7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/96cfeb0389530ae32ade8a48ae3ae1ac3b6c009d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c2a7fc514637f640ff55c3f3e3ed879970814a3f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e3db757ff9b7101ae68650ac5f6dd5743b68164e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f81302decd64245bb1bd154ecae0f65a9ee21f04 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 OCT 12:13Z
    f2fs: fix to wait dio completion
    cvelistv5