CVE-2024-27035 (GCVE-0-2024-27035)

Vulnerability from cvelistv5 – Published: 2024-05-01 12:53 – Updated: 2026-08-05 11:29
VLAI
Title
f2fs: compress: fix to guarantee persisting compressed blocks by CP
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in compressed cluster is not persisted with metadata during checkpoint, after SPOR, the data may be corrupted, let's guarantee to write compressed page by checkpoint.
Severity
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 4c8ff7095bef64fc47e996a938f7d57f9e077da3 , < e54cce8137258a550b49cae45d09e024821fb28d (git)
Affected: 4c8ff7095bef64fc47e996a938f7d57f9e077da3 , < 82704e598d7b33c7e45526e34d3c585426319bed (git)
Affected: 4c8ff7095bef64fc47e996a938f7d57f9e077da3 , < c3311694b9bcced233548574d414c91d39214684 (git)
Affected: 4c8ff7095bef64fc47e996a938f7d57f9e077da3 , < 57e8b17d0522c8f4daf0c4d9969b4d7358033532 (git)
Affected: 4c8ff7095bef64fc47e996a938f7d57f9e077da3 , < 8a430dd49e9cb021372b0ad91e60aeef9c6ced00 (git)
Create a notification for this product.
Linux Linux Affected: 5.6
Unaffected: 0 , < 5.6 (semver)
Unaffected: 6.1.83 , ≤ 6.1.* (semver)
Unaffected: 6.6.23 , ≤ 6.6.* (semver)
Unaffected: 6.7.11 , ≤ 6.7.* (semver)
Unaffected: 6.8.2 , ≤ 6.8.* (semver)
Unaffected: 6.9 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-27035",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-17T17:40:14.613391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-17T17:45:34.458Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:21:05.950Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/compress.c",
            "fs/f2fs/data.c",
            "fs/f2fs/f2fs.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e54cce8137258a550b49cae45d09e024821fb28d",
              "status": "affected",
              "version": "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
              "versionType": "git"
            },
            {
              "lessThan": "82704e598d7b33c7e45526e34d3c585426319bed",
              "status": "affected",
              "version": "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
              "versionType": "git"
            },
            {
              "lessThan": "c3311694b9bcced233548574d414c91d39214684",
              "status": "affected",
              "version": "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
              "versionType": "git"
            },
            {
              "lessThan": "57e8b17d0522c8f4daf0c4d9969b4d7358033532",
              "status": "affected",
              "version": "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
              "versionType": "git"
            },
            {
              "lessThan": "8a430dd49e9cb021372b0ad91e60aeef9c6ced00",
              "status": "affected",
              "version": "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/compress.c",
            "fs/f2fs/data.c",
            "fs/f2fs/f2fs.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "lessThan": "5.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.23",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.83",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.23",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.11",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.2",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix to guarantee persisting compressed blocks by CP\n\nIf data block in compressed cluster is not persisted with metadata\nduring checkpoint, after SPOR, the data may be corrupted, let\u0027s\nguarantee to write compressed page by checkpoint."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached by writing to a file on a locally mounted f2fs volume via ordinary write/fsync/sync syscalls and an FS_IOC_SETFLAGS ioctl; no network protocol handler processes attacker data on this path.\nAC:L - The attacker fully controls both sides of the window \u2014 issuing compressed-cluster writeback and forcing a concurrent checkpoint \u2014 and the checkpoint deterministically fails to wait for or even submit the compressed blocks every time, so no condition of the exploit itself is outside attacker influence.\nPR:L - Enabling compression requires only inode_owner_or_capable() on one\u0027s own empty file (fs/f2fs/file.c:1906), and on compress_extension-mounted volumes even that is unnecessary; any unprivileged local user with write access to the f2fs volume can trigger it.\nUI:N - Writeback, checkpointing, and the missing CP wait all occur automatically in kernel context once the attacker writes and syncs; no victim action is required.\nS:U - The corruption is confined to the f2fs filesystem managed by the same kernel security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:L - Blocks marked valid by the committed checkpoint were never written, so reads return the prior on-disk content of freshly allocated LFS blocks \u2014 potentially another user\u0027s deleted file data \u2014 though the clen validation and decompressor bounds checks limit how much coherent data is recoverable.\nI:H - Committed, fsync-acknowledged user file data is silently replaced with stale block content after power loss, and the resulting f2fs metadata/data mismatch is an unbounded corruption of arbitrary files on the volume.\nA:H - Affected clusters permanently return -EFSCORRUPTED/-EIO, the superblock is flagged SBI_NEED_FSCK with ERROR_FAIL_DECOMPRESSION recorded, forcing a full fsck (and on Android, boot-time repair or data loss) \u2014 a durable loss of availability for the stored data."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:29:09.926Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d"
        },
        {
          "url": "https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed"
        },
        {
          "url": "https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684"
        },
        {
          "url": "https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532"
        },
        {
          "url": "https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00"
        }
      ],
      "title": "f2fs: compress: fix to guarantee persisting compressed blocks by CP",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-27035",
    "datePublished": "2024-05-01T12:53:43.155Z",
    "dateReserved": "2024-02-19T14:20:24.211Z",
    "dateUpdated": "2026-08-05T11:29:09.926Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-27035",
      "date": "2026-08-10",
      "epss": "0.00276",
      "percentile": "0.19665"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: compress: fix to guarantee persisting compressed blocks by CP\\n\\nIf data block in compressed cluster is not persisted with metadata\\nduring checkpoint, after SPOR, the data may be corrupted, let\u0027s\\nguarantee to write compressed page by checkpoint.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: compress: correcci\\u00f3n para garantizar la persistencia de los bloques comprimidos por CP. Si el bloque de datos en el cl\\u00faster comprimido no persiste con los metadatos durante el punto de control, despu\\u00e9s de SPOR, los datos pueden estar da\\u00f1ados, garanticemos que escribir p\\u00e1gina comprimida por punto de control.\"}]",
      "id": "CVE-2024-27035",
      "lastModified": "2024-11-21T09:03:42.797",
      "published": "2024-05-01T13:15:49.360",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "microsoft_vex": {
      "current_release_date": "2025-09-20T01:03:15.000Z",
      "cve": "CVE-2024-27035",
      "id": "msrc_CVE-2024-27035",
      "initial_release_date": "2024-05-02T07:00:00.000Z",
      "product_status:known_not_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "f2fs: compress: fix to guarantee persisting compressed blocks by CP",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-27035.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-27035\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-01T13:15:49.360\",\"lastModified\":\"2026-08-04T11:17:36.720\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: compress: fix to guarantee persisting compressed blocks by CP\\n\\nIf data block in compressed cluster is not persisted with metadata\\nduring checkpoint, after SPOR, the data may be corrupted, let\u0027s\\nguarantee to write compressed page by checkpoint.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: compress: correcci\u00f3n para garantizar la persistencia de los bloques comprimidos por CP. Si el bloque de datos en el cl\u00faster comprimido no persiste con los metadatos durante el punto de control, despu\u00e9s de SPOR, los datos pueden estar da\u00f1ados, garanticemos que escribir p\u00e1gina comprimida por punto de control.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/f2fs/compress.c\",\"fs/f2fs/data.c\",\"fs/f2fs/f2fs.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4c8ff7095bef64fc47e996a938f7d57f9e077da3\",\"lessThan\":\"e54cce8137258a550b49cae45d09e024821fb28d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4c8ff7095bef64fc47e996a938f7d57f9e077da3\",\"lessThan\":\"82704e598d7b33c7e45526e34d3c585426319bed\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4c8ff7095bef64fc47e996a938f7d57f9e077da3\",\"lessThan\":\"c3311694b9bcced233548574d414c91d39214684\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4c8ff7095bef64fc47e996a938f7d57f9e077da3\",\"lessThan\":\"57e8b17d0522c8f4daf0c4d9969b4d7358033532\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4c8ff7095bef64fc47e996a938f7d57f9e077da3\",\"lessThan\":\"8a430dd49e9cb021372b0ad91e60aeef9c6ced00\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/f2fs/compress.c\",\"fs/f2fs/data.c\",\"fs/f2fs/f2fs.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.6\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.83\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.23\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7.11\",\"lessThanOrEqual\":\"6.7.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8.2\",\"lessThanOrEqual\":\"6.8.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.5},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-06-17T17:40:14.613391Z\",\"id\":\"CVE-2024-27035\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.6\",\"versionEndExcluding\":\"6.1.83\",\"matchCriteriaId\":\"A1384EE6-520A-4583-A8DE-36A2B9FDABDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.23\",\"matchCriteriaId\":\"E00814DC-0BA7-431A-9926-80FEB4A96C68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.7.11\",\"matchCriteriaId\":\"9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.8\",\"versionEndExcluding\":\"6.8.2\",\"matchCriteriaId\":\"543A75FF-25B8-4046-A514-1EA8EDD87AB1\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:07:34+00:00",
      "cve": "CVE-2024-27035",
      "id": "CVE-2024-27035",
      "initial_release_date": "2024-05-01T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: f2fs: compress: fix to guarantee persisting compressed blocks by CP",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-27035.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2025-09-19T23:32:26Z",
      "cve": "CVE-2024-27035",
      "id": "CVE-2024-27035",
      "initial_release_date": "2024-05-03T02:09:36Z",
      "product_status:known_not_affected": "283",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-27035",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-27035.json",
      "version": "17"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:21:05.950Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27035\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-17T17:40:14.613391Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-17T17:40:15.766Z\"}}], \"cna\": {\"title\": \"f2fs: compress: fix to guarantee persisting compressed blocks by CP\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - The vulnerability is reached by writing to a file on a locally mounted f2fs volume via ordinary write/fsync/sync syscalls and an FS_IOC_SETFLAGS ioctl; no network protocol handler processes attacker data on this path.\\nAC:L - The attacker fully controls both sides of the window \\u2014 issuing compressed-cluster writeback and forcing a concurrent checkpoint \\u2014 and the checkpoint deterministically fails to wait for or even submit the compressed blocks every time, so no condition of the exploit itself is outside attacker influence.\\nPR:L - Enabling compression requires only inode_owner_or_capable() on one\u0027s own empty file (fs/f2fs/file.c:1906), and on compress_extension-mounted volumes even that is unnecessary; any unprivileged local user with write access to the f2fs volume can trigger it.\\nUI:N - Writeback, checkpointing, and the missing CP wait all occur automatically in kernel context once the attacker writes and syncs; no victim action is required.\\nS:U - The corruption is confined to the f2fs filesystem managed by the same kernel security authority; no VM, IOMMU, or sandbox boundary is crossed.\\nC:L - Blocks marked valid by the committed checkpoint were never written, so reads return the prior on-disk content of freshly allocated LFS blocks \\u2014 potentially another user\u0027s deleted file data \\u2014 though the clen validation and decompressor bounds checks limit how much coherent data is recoverable.\\nI:H - Committed, fsync-acknowledged user file data is silently replaced with stale block content after power loss, and the resulting f2fs metadata/data mismatch is an unbounded corruption of arbitrary files on the volume.\\nA:H - Affected clusters permanently return -EFSCORRUPTED/-EIO, the superblock is flagged SBI_NEED_FSCK with ERROR_FAIL_DECOMPRESSION recorded, forcing a full fsck (and on Android, boot-time repair or data loss) \\u2014 a durable loss of availability for the stored data.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"e54cce8137258a550b49cae45d09e024821fb28d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"82704e598d7b33c7e45526e34d3c585426319bed\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"c3311694b9bcced233548574d414c91d39214684\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"57e8b17d0522c8f4daf0c4d9969b4d7358033532\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"8a430dd49e9cb021372b0ad91e60aeef9c6ced00\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/f2fs/compress.c\", \"fs/f2fs/data.c\", \"fs/f2fs/f2fs.h\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.6\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.6\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.83\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.23\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/f2fs/compress.c\", \"fs/f2fs/data.c\", \"fs/f2fs/f2fs.h\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\"}, {\"url\": \"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\"}, {\"url\": \"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\"}, {\"url\": \"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\"}, {\"url\": \"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: compress: fix to guarantee persisting compressed blocks by CP\\n\\nIf data block in compressed cluster is not persisted with metadata\\nduring checkpoint, after SPOR, the data may be corrupted, let\u0027s\\nguarantee to write compressed page by checkpoint.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.83\", \"versionStartIncluding\": \"5.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.23\", \"versionStartIncluding\": \"5.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.11\", \"versionStartIncluding\": \"5.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.2\", \"versionStartIncluding\": \"5.6\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9\", \"versionStartIncluding\": \"5.6\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T11:29:09.926Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-27035\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T11:29:09.926Z\", \"dateReserved\": \"2024-02-19T14:20:24.211Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-01T12:53:43.155Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.