CVE-2024-34027: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
In the Linux kernel, the following vulnerability has been resolved:
f2fs: compress: fix to cover {reserve,release}compressblocks() w/ cprwsem lock
It needs to cover {reserve,release}compressblocks() w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .totalvalidblockcount may be corrupted after SPO case.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34027?
The severity of CVE-2024-34027 is currently classified as moderate.
How do I fix CVE-2024-34027?
To fix CVE-2024-34027, update the Linux kernel to versions 5.10.223-1, 5.10.234-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.16-1.
What is the impact of CVE-2024-34027 on affected systems?
CVE-2024-34027 can cause race conditions in the filesystem metadata operations, potentially leading to data corruption.
Which systems are affected by CVE-2024-34027?
CVE-2024-34027 affects Linux distributions that are running the specified vulnerable kernel versions.
Has CVE-2024-34027 been mitigated in newer kernel releases?
Yes, CVE-2024-34027 has been resolved in the newer kernel versions mentioned in the patch.