CVE-2024-27035
f2fs: compress: fix to guarantee persisting compressed blocks by CP
HIGH 7.3
At a glance
- Source
- NVD
- EPSS
- EPSS 0.28 % · percentile 20 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in compressed cluster is not persisted with metadata during checkpoint, after SPOR, the data may be corrupted, let's guarantee to write compressed page by checkpoint.
References
- https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d
- https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed
- https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684
- https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532
- https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2024-24297
- GCVE · GCVE-0-2024-27035
CERT-FR advisories
- CERTFR-2026-AVI-0326 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0316 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0546 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.6 < 6.1.83cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.23cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.7.11cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.8 < 6.8.2
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < e54cce8137258a550b49cae45d09e024821fb28d ; affected 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < 82704e598d7b33c7e45526e34d3c585426319bed ; affected 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < c3311694b9bcced233548574d414c91d39214684 ; affected 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < 57e8b17d0522c8f4daf0c4d9969b4d7358033532 ; affected 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < 8a430dd49e9cb021372b0ad91e60aeef9c6ced00 |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 6.1.83 ≤ 6.1.* ; unaffected 6.6.23 ≤ 6.6.* ; unaffected 6.7.11 ≤ 6.7.* ; unaffected 6.8.2 ≤ 6.8.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |