cve-2024-27035
Vulnerability from cvelistv5
Published
2024-05-01 12:53
Modified
2024-12-19 08:53
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in compressed cluster is not persisted with metadata during checkpoint, after SPOR, the data may be corrupted, let's guarantee to write compressed page by checkpoint.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d
Impacted products
Vendor Product Version
Linux Linux Version: 4c8ff7095bef64fc47e996a938f7d57f9e077da3
Version: 4c8ff7095bef64fc47e996a938f7d57f9e077da3
Version: 4c8ff7095bef64fc47e996a938f7d57f9e077da3
Version: 4c8ff7095bef64fc47e996a938f7d57f9e077da3
Version: 4c8ff7095bef64fc47e996a938f7d57f9e077da3
 Create a notification for this product.
   Linux Linux Version: 5.6
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-27035",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-17T17:40:14.613391Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-17T17:45:34.458Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T00:21:05.950Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "fs/f2fs/compress.c",
                  "fs/f2fs/data.c",
                  "fs/f2fs/f2fs.h",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "e54cce8137258a550b49cae45d09e024821fb28d",
                     status: "affected",
                     version: "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
                     versionType: "git",
                  },
                  {
                     lessThan: "82704e598d7b33c7e45526e34d3c585426319bed",
                     status: "affected",
                     version: "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
                     versionType: "git",
                  },
                  {
                     lessThan: "c3311694b9bcced233548574d414c91d39214684",
                     status: "affected",
                     version: "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
                     versionType: "git",
                  },
                  {
                     lessThan: "57e8b17d0522c8f4daf0c4d9969b4d7358033532",
                     status: "affected",
                     version: "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
                     versionType: "git",
                  },
                  {
                     lessThan: "8a430dd49e9cb021372b0ad91e60aeef9c6ced00",
                     status: "affected",
                     version: "4c8ff7095bef64fc47e996a938f7d57f9e077da3",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "fs/f2fs/compress.c",
                  "fs/f2fs/data.c",
                  "fs/f2fs/f2fs.h",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "5.6",
                  },
                  {
                     lessThan: "5.6",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.1.*",
                     status: "unaffected",
                     version: "6.1.83",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.6.*",
                     status: "unaffected",
                     version: "6.6.23",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.7.*",
                     status: "unaffected",
                     version: "6.7.11",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.8.*",
                     status: "unaffected",
                     version: "6.8.2",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.9",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix to guarantee persisting compressed blocks by CP\n\nIf data block in compressed cluster is not persisted with metadata\nduring checkpoint, after SPOR, the data may be corrupted, let's\nguarantee to write compressed page by checkpoint.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T08:53:03.871Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d",
            },
            {
               url: "https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed",
            },
            {
               url: "https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684",
            },
            {
               url: "https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532",
            },
            {
               url: "https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00",
            },
         ],
         title: "f2fs: compress: fix to guarantee persisting compressed blocks by CP",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-27035",
      datePublished: "2024-05-01T12:53:43.155Z",
      dateReserved: "2024-02-19T14:20:24.211Z",
      dateUpdated: "2024-12-19T08:53:03.871Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-27035\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-01T13:15:49.360\",\"lastModified\":\"2024-11-21T09:03:42.797\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: compress: fix to guarantee persisting compressed blocks by CP\\n\\nIf data block in compressed cluster is not persisted with metadata\\nduring checkpoint, after SPOR, the data may be corrupted, let's\\nguarantee to write compressed page by checkpoint.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: compress: corrección para garantizar la persistencia de los bloques comprimidos por CP. Si el bloque de datos en el clúster comprimido no persiste con los metadatos durante el punto de control, después de SPOR, los datos pueden estar dañados, garanticemos que escribir página comprimida por punto de control.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:21:05.950Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27035\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-17T17:40:14.613391Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-17T17:40:15.766Z\"}}], \"cna\": {\"title\": \"f2fs: compress: fix to guarantee persisting compressed blocks by CP\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"e54cce8137258a550b49cae45d09e024821fb28d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"82704e598d7b33c7e45526e34d3c585426319bed\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"c3311694b9bcced233548574d414c91d39214684\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"57e8b17d0522c8f4daf0c4d9969b4d7358033532\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4c8ff7095bef64fc47e996a938f7d57f9e077da3\", \"lessThan\": \"8a430dd49e9cb021372b0ad91e60aeef9c6ced00\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/f2fs/compress.c\", \"fs/f2fs/data.c\", \"fs/f2fs/f2fs.h\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.6\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.6\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.83\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.23\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/f2fs/compress.c\", \"fs/f2fs/data.c\", \"fs/f2fs/f2fs.h\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d\"}, {\"url\": \"https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed\"}, {\"url\": \"https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684\"}, {\"url\": \"https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532\"}, {\"url\": \"https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: compress: fix to guarantee persisting compressed blocks by CP\\n\\nIf data block in compressed cluster is not persisted with metadata\\nduring checkpoint, after SPOR, the data may be corrupted, let's\\nguarantee to write compressed page by checkpoint.\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T08:53:03.871Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-27035\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T08:53:03.871Z\", \"dateReserved\": \"2024-02-19T14:20:24.211Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-01T12:53:43.155Z\", \"assignerShortName\": \"Linux\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.