CVE-2024-34027 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
A race condition in the Linux kernel f2fs filesystem can corrupt metadata during checkpoint operations, potentially leading to data integrity issues.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-34027?
CVE-2024-34027 is a high-severity vulnerability in Linux kernel, published on 24 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .total_valid_block_count may be corrupted after SPO case.
Weakness: CWE-770
Which versions are affected by CVE-2024-34027?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-34027?
Apply the vendor's patch.
Is CVE-2024-34027 being exploited?
There is no known exploitation of CVE-2024-34027 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-34027, DEBIAN-CVE-2024-34027, GHSA-v9jr-v6vm-vm67, UBUNTU-CVE-2024-34027.