CVE-2024-27034— f2fs: compress: fix to cover normal cluster write with cp_rwsem
Affected Version Matrix 14
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 4c8ff7095bef64fc47e996a938f7d57f9e077da3< 7d420eaaa18ec8e2bb4eeab8c65c00492ef6f416 | affected |
4c8ff7095bef64fc47e996a938f7d57f9e077da3< 542c8b3c774a480bfd0804291a12f6f2391b0cd1 | affected | ||
4c8ff7095bef64fc47e996a938f7d57f9e077da3< 75abfd61392b1db391bde6d738a30d685b843286 | affected | ||
4c8ff7095bef64fc47e996a938f7d57f9e077da3< 2b1b14d9fc94b8feae20808684c8af28ec80f45b | affected | ||
4c8ff7095bef64fc47e996a938f7d57f9e077da3< 52982edfcefd475cc34af663d5c47c0cddaa5739 | affected | ||
4c8ff7095bef64fc47e996a938f7d57f9e077da3< fd244524c2cf07b5f4c3fe8abd6a99225c76544b | affected | ||
5.6 | affected | ||
< 5.6 | unaffected | ||
| … +6 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-27034
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
f2fs: compress: fix to cover normal cluster write with cp_rwsem
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover normal cluster write with cp_rwsem When we overwrite compressed cluster w/ normal cluster, we should not unlock cp_rwsem during f2fs_write_raw_pages(), otherwise data will be corrupted if partial blocks were persisted before CP & SPOR, due to cluster metadata wasn't updated atomically.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于集群元数据没有自动更新。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-27034
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-27034
请登录查看更多情报信息。
Other References for CVE-2024-27034 (6)
Same Patch Batch · Linux · 2024-05-01 · 159 CVEs total
| CVE-2024-27038 | clk: Fix clk_core_get NULL dereference | |
| CVE-2024-27028 | spi: spi-mt65xx: Fix NULL pointer access in interrupt handler | |
| CVE-2024-27029 | drm/amdgpu: fix mmhub client id out-of-bounds access | |
| CVE-2024-27030 | octeontx2-af: Use separate handlers for interrupts | |
| CVE-2024-27031 | NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt | |
| CVE-2024-27032 | f2fs: fix to avoid potential panic during recovery | |
| CVE-2024-27033 | f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic | |
| CVE-2024-27035 | f2fs: compress: fix to guarantee persisting compressed blocks by CP | |
| CVE-2024-27036 | cifs: Fix writeback data corruption | |
| CVE-2024-27037 | clk: zynq: Prevent null pointer dereference caused by kmalloc failure | |
| CVE-2024-27044 | drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_fun | |
| CVE-2024-27048 | wifi: brcm80211: handle pmk_op allocation failure | |
| CVE-2024-27047 | net: phy: fix phy_get_internal_delay accessing an empty array | |
| CVE-2024-27046 | nfp: flower: handle acti_netdevs allocation failure | |
| CVE-2024-27045 | drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' | |
| CVE-2024-27041 | drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini() | |
| CVE-2024-27039 | clk: hisilicon: hi3559a: Fix an erroneous devm_kfree() | |
| CVE-2024-27040 | drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()' | |
| CVE-2023-52650 | drm/tegra: dsi: Add missing check for of_find_device_by_node | |
| CVE-2024-27043 | media: edia: dvbdev: fix a use-after-free |
Showing top 20 of 159 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-27034
No comments yet