CVE-2024-27034

f2fs: compress: fix to cover normal cluster write with cp_rwsem

MEDIUM
5.5
CVSS Score
Published: May 1, 2024 at 12:53 PM UTC
Updated: August 5, 2026 at 12:04 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover normal cluster write with cp_rwsem When we overwrite compressed cluster w/ normal cluster, we should not unlock cp_rwsem during f2fs_write_raw_pages(), otherwise data will be corrupted if partial blocks were persisted before CP & SPOR, due to cluster metadata wasn't updated atomically.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.16 ≤ v < 6.1.835.6 ≤ v < 5.15.1535.6 ≤ v < 6.1.835.6 ≤ v < 6.6.235.6 ≤ v < 6.7.115.6 ≤ v < 6.8.25.6 ≤ v < 6.96.2 ≤ v < 6.6.236.7 ≤ v < 6.7.116.8 ≤ v < 6.8.24c8ff7095bef64fc47e996a938f7d57f9e077da35.6
Vendor states this is fixed in 2b1b14d9fc94b8feae20808684c8af28ec80f45b (fixed)
Vendor states this is fixed in 52982edfcefd475cc34af663d5c47c0cddaa5739 (fixed)
Vendor states this is fixed in 542c8b3c774a480bfd0804291a12f6f2391b0cd1 (fixed)
Vendor states this is fixed in 75abfd61392b1db391bde6d738a30d685b843286 (fixed)
Vendor states this is fixed in 7d420eaaa18ec8e2bb4eeab8c65c00492ef6f416 (fixed)
Vendor states this is fixed in fd244524c2cf07b5f4c3fe8abd6a99225c76544b (fixed)
Vendor states this is fixed in 5.15.153 (unaffected)
Vendor states this is fixed in 5.6 (unaffected)
Vendor states this is fixed in 6.1.83 (unaffected)
Vendor states this is fixed in 6.6.23 (unaffected)
Vendor states this is fixed in 6.7.11 (unaffected)
Vendor states this is fixed in 6.8.2 (unaffected)
Vendor states this is fixed in 6.9 (unaffected)

References (6)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2b1b14d9fc94b8feae20808684c8af28ec80f45b
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/52982edfcefd475cc34af663d5c47c0cddaa5739
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/542c8b3c774a480bfd0804291a12f6f2391b0cd1
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/75abfd61392b1db391bde6d738a30d685b843286
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7d420eaaa18ec8e2bb4eeab8c65c00492ef6f416
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fd244524c2cf07b5f4c3fe8abd6a99225c76544b

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card