In the Linux kernel, the following vulnerability has been resolved:
f2fs: compress: fix to cover {reserve,release}compressblocks() w/ cp_rwsem lock
It needs to cover {reserve,release}compressblocks() w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .totalvalidblockcount may be corrupted after SPO case.
[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2145.0,
"function_hash": "85215764935852809554916168163244944389"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69136304fd144144a4828c7b7b149d0f80321ba4",
"target": {
"file": "fs/f2fs/file.c",
"function": "f2fs_release_compress_blocks"
},
"id": "CVE-2024-34027-156f0706"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 2145.0,
"function_hash": "85215764935852809554916168163244944389"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b",
"target": {
"file": "fs/f2fs/file.c",
"function": "f2fs_release_compress_blocks"
},
"id": "CVE-2024-34027-1b796fd9"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1896.0,
"function_hash": "177475888844963256216211684988527984937"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b",
"target": {
"file": "fs/f2fs/file.c",
"function": "f2fs_reserve_compress_blocks"
},
"id": "CVE-2024-34027-1e1209ca"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"124409526433145358968530312944813195261",
"338135955217851470289754298222729773194",
"289547886286402001355197540479825568611",
"234957184114563024717657717973203454356",
"72399498533466651045806489833211063661",
"243695431428702303815314728167356787283",
"264537364808169357989442897835035262508",
"34835448940670521438057451010102694344",
"24753424173220276392104625313162331580",
"124409526433145358968530312944813195261",
"338135955217851470289754298222729773194",
"289547886286402001355197540479825568611",
"234957184114563024717657717973203454356",
"72399498533466651045806489833211063661",
"243695431428702303815314728167356787283",
"76650562656402609843824777104679798129",
"278061173141912989333594936125013103452",
"24753424173220276392104625313162331580"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69136304fd144144a4828c7b7b149d0f80321ba4",
"target": {
"file": "fs/f2fs/file.c"
},
"id": "CVE-2024-34027-40a10398"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1896.0,
"function_hash": "177475888844963256216211684988527984937"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@69136304fd144144a4828c7b7b149d0f80321ba4",
"target": {
"file": "fs/f2fs/file.c",
"function": "f2fs_reserve_compress_blocks"
},
"id": "CVE-2024-34027-8624774d"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"124409526433145358968530312944813195261",
"338135955217851470289754298222729773194",
"289547886286402001355197540479825568611",
"234957184114563024717657717973203454356",
"72399498533466651045806489833211063661",
"243695431428702303815314728167356787283",
"264537364808169357989442897835035262508",
"34835448940670521438057451010102694344",
"24753424173220276392104625313162331580",
"124409526433145358968530312944813195261",
"338135955217851470289754298222729773194",
"289547886286402001355197540479825568611",
"234957184114563024717657717973203454356",
"72399498533466651045806489833211063661",
"243695431428702303815314728167356787283",
"76650562656402609843824777104679798129",
"278061173141912989333594936125013103452",
"24753424173220276392104625313162331580"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b",
"target": {
"file": "fs/f2fs/file.c"
},
"id": "CVE-2024-34027-d29ea823"
}
]