In the Linux kernel, the following vulnerability has been resolved:
f2fs: compress: fix to cover {reserve,release}compressblocks() w/ cp_rwsem lock
It needs to cover {reserve,release}compressblocks() w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .totalvalidblockcount may be corrupted after SPO case.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/34xxx/CVE-2024-34027.json"
}[
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-34027-25cb5b82",
"target": {
"file": "fs/f2fs/file.c",
"function": "f2fs_reserve_compress_blocks"
},
"digest": {
"length": 1937.0,
"function_hash": "69160372765027188235055505661562503023"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a4ed2d97cb6d044196cc3e726b6699222b41019"
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2024-34027-383bd171",
"target": {
"file": "fs/f2fs/file.c",
"function": "f2fs_release_compress_blocks"
},
"digest": {
"length": 2186.0,
"function_hash": "213287922290382200214476865919464630575"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a4ed2d97cb6d044196cc3e726b6699222b41019"
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2024-34027-5c556366",
"target": {
"file": "fs/f2fs/file.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"124409526433145358968530312944813195261",
"338135955217851470289754298222729773194",
"289547886286402001355197540479825568611",
"234957184114563024717657717973203454356",
"72399498533466651045806489833211063661",
"243695431428702303815314728167356787283",
"264537364808169357989442897835035262508",
"34835448940670521438057451010102694344",
"24753424173220276392104625313162331580",
"124409526433145358968530312944813195261",
"338135955217851470289754298222729773194",
"289547886286402001355197540479825568611",
"234957184114563024717657717973203454356",
"72399498533466651045806489833211063661",
"243695431428702303815314728167356787283",
"76650562656402609843824777104679798129",
"278061173141912989333594936125013103452",
"24753424173220276392104625313162331580"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a4ed2d97cb6d044196cc3e726b6699222b41019"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-34027.json"