- Vulnerability/
- CVE-2024-41935
CVE-2024-41935: f2fs: fix to shrink read extent node in batches
First published: Sat Jan 11 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it may hold rwlock for a very long time, which may trigger kernel hang issue. This patch fixes to shrink read extent node in batches, so that, critical region of the rwlock can be shrunk to avoid its extreme long time hold.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| debian/linux | <=5.10.223-1<=5.10.234-1<=6.1.129-1<=6.1.128-1 | 6.12.20-1 6.12.21-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/295b50e95e900da31ff237e46e04525fa799b2cf
- https://git.kernel.org/stable/c/3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343
- https://git.kernel.org/stable/c/924f7dd1e832e4e4530d14711db223d2803f7b61
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41935
- https://nvd.nist.gov/vuln/detail/CVE-2024-41935
- https://launchpad.net/bugs/cve/CVE-2024-41935
- https://security-tracker.debian.org/tracker/CVE-2024-41935
- https://ubuntu.com/security/CVE-2024-41935
- https://git.kernel.org/linus/3fc5d5a182f6a1f8bd4dc775feb54c369dd2c343
Frequently Asked Questions
What is the severity of CVE-2024-41935?
The severity of CVE-2024-41935 is classified as medium, indicating potential risk to systems under specific conditions.
How do I fix CVE-2024-41935?
To fix CVE-2024-41935, you need to update to the latest version of the Linux kernel, which contains the necessary patches.
What is the impact of CVE-2024-41935 on systems?
CVE-2024-41935 can lead to performance issues during the shrinking process of the extent nodes in the f2fs file system.
Which versions of the Linux kernel are affected by CVE-2024-41935?
CVE-2024-41935 affects certain earlier versions of the Linux kernel that manage the f2fs file system.
Is there a workaround for CVE-2024-41935?
There are no specific workarounds for CVE-2024-41935 other than applying the available kernel updates.
- agent/severity
- agent/title
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- agent/references
- agent/softwarecombine
- collector/launchpad-cve
- source/Launchpad
- agent/source
- agent/tags
- agent/description
- agent/event
- collector/nvd-cve
- vendor/linux
- canonical/linux kernel
- package-manager/debian