CVE-2024-34027

f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

State: Published
Severity: 7.8 High
Published: Jun 24, 2024
Updated: Oct 15, 2026
Reserved: Jun 24, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .total_valid_block_count may be corrupted after SPO case.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-770 Allocation of Resources Without Limits or Throttling

Affected Products

Product	Versions
LinuxLinux	ef8d563f184e1112651f2cbde383d43e599334e8 to before a6e1f7744e9b84f86a629a76024bba8468aa153bAffected ef8d563f184e1112651f2cbde383d43e599334e8 to before b5bac43875aa27ec032dbbb86173baae6dce6182Affected ef8d563f184e1112651f2cbde383d43e599334e8 to before 5d47d63883735718825ca2efc4fca6915469774fAffected ef8d563f184e1112651f2cbde383d43e599334e8 to before 329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2bAffected ef8d563f184e1112651f2cbde383d43e599334e8 to before 69136304fd144144a4828c7b7b149d0f80321ba4Affected ef8d563f184e1112651f2cbde383d43e599334e8 to before 0a4ed2d97cb6d044196cc3e726b6699222b41019Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.9.4 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

ef8d563f184e1112651f2cbde383d43e599334e8 to before a6e1f7744e9b84f86a629a76024bba8468aa153bAffected
ef8d563f184e1112651f2cbde383d43e599334e8 to before b5bac43875aa27ec032dbbb86173baae6dce6182Affected
ef8d563f184e1112651f2cbde383d43e599334e8 to before 5d47d63883735718825ca2efc4fca6915469774fAffected
ef8d563f184e1112651f2cbde383d43e599334e8 to before 329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2bAffected
ef8d563f184e1112651f2cbde383d43e599334e8 to before 69136304fd144144a4828c7b7b149d0f80321ba4Affected
ef8d563f184e1112651f2cbde383d43e599334e8 to before 0a4ed2d97cb6d044196cc3e726b6699222b41019Affected

LinuxLinux

5.8Affected
before 5.8Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.9.4 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.