In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to wait on block writeback for post_read case
If inode is compressed, but not encrypted, it missed to call f2fswaitonblockwriteback() to wait for GCed page writeback in IPU write path.
Thread A GC-Thread - f2fsgc - dogarbagecollect - gcdatasegment - movedatablock - f2fssubmitpagewrite migrate normal cluster's block via metainode's page cache - f2fswritesingledatapage - f2fsdowritedatapage - f2fsinplacewritedata - f2fssubmitpage_bio
IRQ - f2fsreadendio IRQ old data overrides new data due to out-of-order GC and common IO. - f2fsreadendio
{ "vanir_signatures": [ { "signature_version": "v1", "target": { "function": "f2fs_encrypt_one_page", "file": "fs/f2fs/data.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55fdc1c24a1d6229fe0ecf31335fb9a2eceaaa00", "deprecated": false, "digest": { "length": 876.0, "function_hash": "240864428981417301109446750044509322324" }, "id": "CVE-2023-52682-0d8b600b" }, { "signature_version": "v1", "target": { "function": "f2fs_encrypt_one_page", "file": "fs/f2fs/data.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f904c156d8011d8291ffd5b6b398f3747e294986", "deprecated": false, "digest": { "length": 876.0, "function_hash": "240864428981417301109446750044509322324" }, "id": "CVE-2023-52682-1aa211b2" }, { "signature_version": "v1", "target": { "function": "f2fs_encrypt_one_page", "file": "fs/f2fs/data.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4535be48780431753505e74e1b1ad4836a189bc2", "deprecated": false, "digest": { "length": 876.0, "function_hash": "240864428981417301109446750044509322324" }, "id": "CVE-2023-52682-3a6f8415" }, { "signature_version": "v1", "target": { "file": "fs/f2fs/data.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55fdc1c24a1d6229fe0ecf31335fb9a2eceaaa00", "deprecated": false, "digest": { "line_hashes": [ "34515299831737971267899927094946448542", "1229735360403177898771775358945814485", "103887737931445333146290951557661071515", "223227607597119489547342582656212828404", "208532829863820568016683363887557314839", "57310394304310639763777948537487878913", "23206203745693658324527641737851904630" ], "threshold": 0.9 }, "id": "CVE-2023-52682-55ed474b" }, { "signature_version": "v1", "target": { "file": "fs/f2fs/data.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f904c156d8011d8291ffd5b6b398f3747e294986", "deprecated": false, "digest": { "line_hashes": [ "34515299831737971267899927094946448542", "1229735360403177898771775358945814485", "103887737931445333146290951557661071515", "223227607597119489547342582656212828404", "208532829863820568016683363887557314839", "57310394304310639763777948537487878913", "23206203745693658324527641737851904630" ], "threshold": 0.9 }, "id": "CVE-2023-52682-685a3702" }, { "signature_version": "v1", "target": { "function": "f2fs_do_write_data_page", "file": "fs/f2fs/data.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4535be48780431753505e74e1b1ad4836a189bc2", "deprecated": false, "digest": { "length": 2413.0, "function_hash": "102883725324881460654391347601118145452" }, "id": "CVE-2023-52682-c1e1578b" }, { "signature_version": "v1", "target": { "function": "f2fs_do_write_data_page", "file": "fs/f2fs/data.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f904c156d8011d8291ffd5b6b398f3747e294986", "deprecated": false, "digest": { "length": 2413.0, "function_hash": "102883725324881460654391347601118145452" }, "id": "CVE-2023-52682-e3ee6e11" }, { "signature_version": "v1", "target": { "function": "f2fs_do_write_data_page", "file": "fs/f2fs/data.c" }, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55fdc1c24a1d6229fe0ecf31335fb9a2eceaaa00", "deprecated": false, "digest": { "length": 2344.0, "function_hash": "302995255363761014054275864982955656676" }, "id": "CVE-2023-52682-edf435b3" }, { "signature_version": "v1", "target": { "file": "fs/f2fs/data.c" }, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4535be48780431753505e74e1b1ad4836a189bc2", "deprecated": false, "digest": { "line_hashes": [ "34515299831737971267899927094946448542", "1229735360403177898771775358945814485", "103887737931445333146290951557661071515", "223227607597119489547342582656212828404", "208532829863820568016683363887557314839", "57310394304310639763777948537487878913", "23206203745693658324527641737851904630" ], "threshold": 0.9 }, "id": "CVE-2023-52682-fb54628d" } ] }