CVE-2024-47690 (GCVE-0-2024-47690)

Vulnerability from cvelistv5 – Published: 2024-10-21 11:53 – Updated: 2026-08-05 11:39
VLAI
Title
f2fs: get rid of online repaire on corrupted directory
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: get rid of online repaire on corrupted directory syzbot reports a f2fs bug as below: kernel BUG at fs/f2fs/inode.c:896! RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896 Call Trace: evict+0x532/0x950 fs/inode.c:704 dispose_list fs/inode.c:747 [inline] evict_inodes+0x5f9/0x690 fs/inode.c:797 generic_shutdown_super+0x9d/0x2d0 fs/super.c:627 kill_block_super+0x44/0x90 fs/super.c:1696 kill_f2fs_super+0x344/0x690 fs/f2fs/super.c:4898 deactivate_locked_super+0xc4/0x130 fs/super.c:473 cleanup_mnt+0x41f/0x4b0 fs/namespace.c:1373 task_work_run+0x24f/0x310 kernel/task_work.c:228 ptrace_notify+0x2d2/0x380 kernel/signal.c:2402 ptrace_report_syscall include/linux/ptrace.h:415 [inline] ptrace_report_syscall_exit include/linux/ptrace.h:477 [inline] syscall_exit_work+0xc6/0x190 kernel/entry/common.c:173 syscall_exit_to_user_mode_prepare kernel/entry/common.c:200 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:205 [inline] syscall_exit_to_user_mode+0x279/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896 Online repaire on corrupted directory in f2fs_lookup() can generate dirty data/meta while racing w/ readonly remount, it may leave dirty inode after filesystem becomes readonly, however, checkpoint() will skips flushing dirty inode in a state of readonly mode, result in above panic. Let's get rid of online repaire in f2fs_lookup(), and leave the work to fsck.f2fs.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 510022a85839a8409d1e6a519bb86ce71a84f30a , < e8d64f598eeb079c42a52deaa3a91312c736a49d (git)
Affected: 510022a85839a8409d1e6a519bb86ce71a84f30a , < f4746f2d79507f65cfbde11d3c39ee8338aa50af (git)
Affected: 510022a85839a8409d1e6a519bb86ce71a84f30a , < f9ce2f550d53d044ecfb5ce996406cf42cd6b84d (git)
Affected: 510022a85839a8409d1e6a519bb86ce71a84f30a , < 8be95cd607478d85fa4626e86f811e785905bcbf (git)
Affected: 510022a85839a8409d1e6a519bb86ce71a84f30a , < bcefd0b0611f35b560d0a7281d87529fbe7a1e32 (git)
Affected: 510022a85839a8409d1e6a519bb86ce71a84f30a , < 884ee6dc85b959bc152f15bca80c30f06069e6c4 (git)
Create a notification for this product.
Linux Linux Affected: 4.1
Unaffected: 0 , < 4.1 (semver)
Unaffected: 5.15.168 , ≤ 5.15.* (semver)
Unaffected: 6.1.113 , ≤ 6.1.* (semver)
Unaffected: 6.6.54 , ≤ 6.6.* (semver)
Unaffected: 6.10.13 , ≤ 6.10.* (semver)
Unaffected: 6.11.2 , ≤ 6.11.* (semver)
Unaffected: 6.12 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47690",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-21T13:06:03.889382Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-21T13:14:15.315Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:20:55.203Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/f2fs.h",
            "fs/f2fs/namei.c",
            "include/linux/f2fs_fs.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e8d64f598eeb079c42a52deaa3a91312c736a49d",
              "status": "affected",
              "version": "510022a85839a8409d1e6a519bb86ce71a84f30a",
              "versionType": "git"
            },
            {
              "lessThan": "f4746f2d79507f65cfbde11d3c39ee8338aa50af",
              "status": "affected",
              "version": "510022a85839a8409d1e6a519bb86ce71a84f30a",
              "versionType": "git"
            },
            {
              "lessThan": "f9ce2f550d53d044ecfb5ce996406cf42cd6b84d",
              "status": "affected",
              "version": "510022a85839a8409d1e6a519bb86ce71a84f30a",
              "versionType": "git"
            },
            {
              "lessThan": "8be95cd607478d85fa4626e86f811e785905bcbf",
              "status": "affected",
              "version": "510022a85839a8409d1e6a519bb86ce71a84f30a",
              "versionType": "git"
            },
            {
              "lessThan": "bcefd0b0611f35b560d0a7281d87529fbe7a1e32",
              "status": "affected",
              "version": "510022a85839a8409d1e6a519bb86ce71a84f30a",
              "versionType": "git"
            },
            {
              "lessThan": "884ee6dc85b959bc152f15bca80c30f06069e6c4",
              "status": "affected",
              "version": "510022a85839a8409d1e6a519bb86ce71a84f30a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/f2fs.h",
            "fs/f2fs/namei.c",
            "include/linux/f2fs_fs.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "lessThan": "4.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.168",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.113",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.54",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.13",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.2",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: get rid of online repaire on corrupted directory\n\nsyzbot reports a f2fs bug as below:\n\nkernel BUG at fs/f2fs/inode.c:896!\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\nCall Trace:\n evict+0x532/0x950 fs/inode.c:704\n dispose_list fs/inode.c:747 [inline]\n evict_inodes+0x5f9/0x690 fs/inode.c:797\n generic_shutdown_super+0x9d/0x2d0 fs/super.c:627\n kill_block_super+0x44/0x90 fs/super.c:1696\n kill_f2fs_super+0x344/0x690 fs/f2fs/super.c:4898\n deactivate_locked_super+0xc4/0x130 fs/super.c:473\n cleanup_mnt+0x41f/0x4b0 fs/namespace.c:1373\n task_work_run+0x24f/0x310 kernel/task_work.c:228\n ptrace_notify+0x2d2/0x380 kernel/signal.c:2402\n ptrace_report_syscall include/linux/ptrace.h:415 [inline]\n ptrace_report_syscall_exit include/linux/ptrace.h:477 [inline]\n syscall_exit_work+0xc6/0x190 kernel/entry/common.c:173\n syscall_exit_to_user_mode_prepare kernel/entry/common.c:200 [inline]\n __syscall_exit_to_user_mode_work kernel/entry/common.c:205 [inline]\n syscall_exit_to_user_mode+0x279/0x370 kernel/entry/common.c:218\n do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\n\nOnline repaire on corrupted directory in f2fs_lookup() can generate\ndirty data/meta while racing w/ readonly remount, it may leave dirty\ninode after filesystem becomes readonly, however, checkpoint() will\nskips flushing dirty inode in a state of readonly mode, result in\nabove panic.\n\nLet\u0027s get rid of online repaire in f2fs_lookup(), and leave the work\nto fsck.f2fs."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached through local filesystem operations \u2014 mounting an f2fs image, ordinary path lookup syscalls, and a remount \u2014 with no network protocol involved. Even in the removable-media/automount scenario the triggering actions are local syscalls, and Local scores higher than Physical.\nAC:L - The attacker controls both sides of the race (a lookup loop against `mount -o remount,ro`) and can repeat it indefinitely until the window is hit; the `f2fs_readonly()` check in `__recover_dot_dentries()` is checked once with no locking against the remount. Setting the on-disk `F2FS_INLINE_DOTS` bit is trivial and requires no special conditions.\nPR:L - Reaching `f2fs_lookup()` and thus `__recover_dot_dentries()` requires only an unprivileged local account with search access to the mount; the flag arrives from disk via a crafted image or a legacy mkfs.f2fs volume that an automount daemon (Android vold, udisks2) mounts on the attacker\u0027s behalf. No capability check exists anywhere on the lookup path.\nUI:N - No victim action is needed \u2014 the attacker performs the lookups, remount and unmount itself, and in the removable-media case the automount daemon mounts the volume without any user interaction.\nS:U - The corruption and the resulting panic/use-after-free are confined to the kernel\u0027s own memory and the f2fs superblock structures; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - After the WARN path leaves the evicted inode linked in `sbi-\u003einode_list[DIRTY_META]`, `f2fs_sync_inode_meta()` reads a freed `f2fs_inode_info` via `list_first_entry()` and `igrab()`, giving a use-after-free read of reclaimed slab memory that can be heap-sprayed to disclose kernel data.\nI:H - The same dangling `gdirty_list` entry yields UAF writes through `list_del_init()` in `f2fs_inode_synced()` and `f2fs_update_inode_page()` operating on a reclaimed object, a well-known primitive for heap-spray-based control-flow hijack; the bug additionally leaves persistent on-disk metadata inconsistency requiring fsck.\nA:H - The reported failure is an outright kernel panic at `fs/f2fs/inode.c:896` (`BUG_ON` under CONFIG_F2FS_CHECK_FS, or WARN plus a subsequent use-after-free oops otherwise), triggered on unmount and reproducible on demand."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:39:27.223Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e8d64f598eeb079c42a52deaa3a91312c736a49d"
        },
        {
          "url": "https://git.kernel.org/stable/c/f4746f2d79507f65cfbde11d3c39ee8338aa50af"
        },
        {
          "url": "https://git.kernel.org/stable/c/f9ce2f550d53d044ecfb5ce996406cf42cd6b84d"
        },
        {
          "url": "https://git.kernel.org/stable/c/8be95cd607478d85fa4626e86f811e785905bcbf"
        },
        {
          "url": "https://git.kernel.org/stable/c/bcefd0b0611f35b560d0a7281d87529fbe7a1e32"
        },
        {
          "url": "https://git.kernel.org/stable/c/884ee6dc85b959bc152f15bca80c30f06069e6c4"
        }
      ],
      "title": "f2fs: get rid of online repaire on corrupted directory",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-47690",
    "datePublished": "2024-10-21T11:53:29.870Z",
    "dateReserved": "2024-09-30T16:00:12.942Z",
    "dateUpdated": "2026-08-05T11:39:27.223Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-47690",
      "date": "2026-08-09",
      "epss": "0.00245",
      "percentile": "0.15753"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.1\", \"versionEndExcluding\": \"5.15.168\", \"matchCriteriaId\": \"EAD5095E-29F5-4D9A-8FED-5082AD0A8A01\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.113\", \"matchCriteriaId\": \"D01BD22E-ACD1-4618-9D01-6116570BE1EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.54\", \"matchCriteriaId\": \"D448821D-C085-4CAF-88FA-2DDE7BE21976\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.10.13\", \"matchCriteriaId\": \"CE94BB8D-B0AB-4563-9ED7-A12122B56EBE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.11\", \"versionEndExcluding\": \"6.11.2\", \"matchCriteriaId\": \"AB755D26-97F4-43B6-8604-CD076811E181\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: get rid of online repaire on corrupted directory\\n\\nsyzbot reports a f2fs bug as below:\\n\\nkernel BUG at fs/f2fs/inode.c:896!\\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\\nCall Trace:\\n evict+0x532/0x950 fs/inode.c:704\\n dispose_list fs/inode.c:747 [inline]\\n evict_inodes+0x5f9/0x690 fs/inode.c:797\\n generic_shutdown_super+0x9d/0x2d0 fs/super.c:627\\n kill_block_super+0x44/0x90 fs/super.c:1696\\n kill_f2fs_super+0x344/0x690 fs/f2fs/super.c:4898\\n deactivate_locked_super+0xc4/0x130 fs/super.c:473\\n cleanup_mnt+0x41f/0x4b0 fs/namespace.c:1373\\n task_work_run+0x24f/0x310 kernel/task_work.c:228\\n ptrace_notify+0x2d2/0x380 kernel/signal.c:2402\\n ptrace_report_syscall include/linux/ptrace.h:415 [inline]\\n ptrace_report_syscall_exit include/linux/ptrace.h:477 [inline]\\n syscall_exit_work+0xc6/0x190 kernel/entry/common.c:173\\n syscall_exit_to_user_mode_prepare kernel/entry/common.c:200 [inline]\\n __syscall_exit_to_user_mode_work kernel/entry/common.c:205 [inline]\\n syscall_exit_to_user_mode+0x279/0x370 kernel/entry/common.c:218\\n do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\\n\\nOnline repaire on corrupted directory in f2fs_lookup() can generate\\ndirty data/meta while racing w/ readonly remount, it may leave dirty\\ninode after filesystem becomes readonly, however, checkpoint() will\\nskips flushing dirty inode in a state of readonly mode, result in\\nabove panic.\\n\\nLet\u0027s get rid of online repaire in f2fs_lookup(), and leave the work\\nto fsck.f2fs.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: deshacerse de la reparaci\\u00f3n en l\\u00ednea en un directorio da\\u00f1ado syzbot informa un error de f2fs como el siguiente: \\u00a1ERROR del kernel en fs/f2fs/inode.c:896! RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896 Seguimiento de llamadas: evict+0x532/0x950 fs/inode.c:704 dispose_list fs/inode.c:747 [en l\\u00ednea] evict_inodes+0x5f9/0x690 fs/inode.c:797 generic_shutdown_super+0x9d/0x2d0 fs/super.c:627 kill_block_super+0x44/0x90 fs/super.c:1696 kill_f2fs_super+0x344/0x690 fs/f2fs/super.c:4898 deactivate_locked_super+0xc4/0x130 fs/super.c:473 cleanup_mnt+0x41f/0x4b0 fs/namespace.c:1373 task_work_run+0x24f/0x310 kernel/task_work.c:228 ptrace_notify+0x2d2/0x380 kernel/signal.c:2402 ptrace_report_syscall include/linux/ptrace.h:415 [en l\\u00ednea] ptrace_report_syscall_exit include/linux/ptrace.h:477 [en l\\u00ednea] syscall_exit_work+0xc6/0x190 kernel/entry/common.c:173 syscall_salir_a_modo_usuario_prepare kernel/entry/common.c:200 [en l\\u00ednea] __syscall_salir_a_modo_usuario_work kernel/entry/common.c:205 [en l\\u00ednea] syscall_exit_to_user_mode+0x279/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896 La reparaci\\u00f3n en l\\u00ednea en un directorio da\\u00f1ado en f2fs_lookup() puede generar datos/meta sucios mientras se corre con el remontaje de solo lectura, puede dejar un inodo sucio despu\\u00e9s de que el sistema de archivos se vuelva de solo lectura, sin embargo, checkpoint() omitir\\u00e1 la limpieza del inodo sucio en un estado de modo de solo lectura, lo que dar\\u00e1 como resultado el p\\u00e1nico mencionado anteriormente. Deshag\\u00e1monos de la reparaci\\u00f3n en l\\u00ednea en f2fs_lookup() y dejemos el trabajo a fsck.f2fs.\"}]",
      "id": "CVE-2024-47690",
      "lastModified": "2024-10-23T21:25:11.673",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-10-21T12:15:05.800",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/884ee6dc85b959bc152f15bca80c30f06069e6c4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/8be95cd607478d85fa4626e86f811e785905bcbf\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/bcefd0b0611f35b560d0a7281d87529fbe7a1e32\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e8d64f598eeb079c42a52deaa3a91312c736a49d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f4746f2d79507f65cfbde11d3c39ee8338aa50af\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f9ce2f550d53d044ecfb5ce996406cf42cd6b84d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T15:02:09.000Z",
      "cve": "CVE-2024-47690",
      "id": "msrc_CVE-2024-47690",
      "initial_release_date": "2024-10-01T07:00:00.000Z",
      "product_status:fixed": "5",
      "product_status:known_affected": "5",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "f2fs: get rid of online repaire on corrupted directory",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-47690.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-47690\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-21T12:15:05.800\",\"lastModified\":\"2026-08-04T11:20:40.047\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: get rid of online repaire on corrupted directory\\n\\nsyzbot reports a f2fs bug as below:\\n\\nkernel BUG at fs/f2fs/inode.c:896!\\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\\nCall Trace:\\n evict+0x532/0x950 fs/inode.c:704\\n dispose_list fs/inode.c:747 [inline]\\n evict_inodes+0x5f9/0x690 fs/inode.c:797\\n generic_shutdown_super+0x9d/0x2d0 fs/super.c:627\\n kill_block_super+0x44/0x90 fs/super.c:1696\\n kill_f2fs_super+0x344/0x690 fs/f2fs/super.c:4898\\n deactivate_locked_super+0xc4/0x130 fs/super.c:473\\n cleanup_mnt+0x41f/0x4b0 fs/namespace.c:1373\\n task_work_run+0x24f/0x310 kernel/task_work.c:228\\n ptrace_notify+0x2d2/0x380 kernel/signal.c:2402\\n ptrace_report_syscall include/linux/ptrace.h:415 [inline]\\n ptrace_report_syscall_exit include/linux/ptrace.h:477 [inline]\\n syscall_exit_work+0xc6/0x190 kernel/entry/common.c:173\\n syscall_exit_to_user_mode_prepare kernel/entry/common.c:200 [inline]\\n __syscall_exit_to_user_mode_work kernel/entry/common.c:205 [inline]\\n syscall_exit_to_user_mode+0x279/0x370 kernel/entry/common.c:218\\n do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\\n\\nOnline repaire on corrupted directory in f2fs_lookup() can generate\\ndirty data/meta while racing w/ readonly remount, it may leave dirty\\ninode after filesystem becomes readonly, however, checkpoint() will\\nskips flushing dirty inode in a state of readonly mode, result in\\nabove panic.\\n\\nLet\u0027s get rid of online repaire in f2fs_lookup(), and leave the work\\nto fsck.f2fs.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: deshacerse de la reparaci\u00f3n en l\u00ednea en un directorio da\u00f1ado syzbot informa un error de f2fs como el siguiente: \u00a1ERROR del kernel en fs/f2fs/inode.c:896! RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896 Seguimiento de llamadas: evict+0x532/0x950 fs/inode.c:704 dispose_list fs/inode.c:747 [en l\u00ednea] evict_inodes+0x5f9/0x690 fs/inode.c:797 generic_shutdown_super+0x9d/0x2d0 fs/super.c:627 kill_block_super+0x44/0x90 fs/super.c:1696 kill_f2fs_super+0x344/0x690 fs/f2fs/super.c:4898 deactivate_locked_super+0xc4/0x130 fs/super.c:473 cleanup_mnt+0x41f/0x4b0 fs/namespace.c:1373 task_work_run+0x24f/0x310 kernel/task_work.c:228 ptrace_notify+0x2d2/0x380 kernel/signal.c:2402 ptrace_report_syscall include/linux/ptrace.h:415 [en l\u00ednea] ptrace_report_syscall_exit include/linux/ptrace.h:477 [en l\u00ednea] syscall_exit_work+0xc6/0x190 kernel/entry/common.c:173 syscall_salir_a_modo_usuario_prepare kernel/entry/common.c:200 [en l\u00ednea] __syscall_salir_a_modo_usuario_work kernel/entry/common.c:205 [en l\u00ednea] syscall_exit_to_user_mode+0x279/0x370 kernel/entry/common.c:218 do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896 La reparaci\u00f3n en l\u00ednea en un directorio da\u00f1ado en f2fs_lookup() puede generar datos/meta sucios mientras se corre con el remontaje de solo lectura, puede dejar un inodo sucio despu\u00e9s de que el sistema de archivos se vuelva de solo lectura, sin embargo, checkpoint() omitir\u00e1 la limpieza del inodo sucio en un estado de modo de solo lectura, lo que dar\u00e1 como resultado el p\u00e1nico mencionado anteriormente. Deshag\u00e1monos de la reparaci\u00f3n en l\u00ednea en f2fs_lookup() y dejemos el trabajo a fsck.f2fs.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/f2fs/f2fs.h\",\"fs/f2fs/namei.c\",\"include/linux/f2fs_fs.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"510022a85839a8409d1e6a519bb86ce71a84f30a\",\"lessThan\":\"e8d64f598eeb079c42a52deaa3a91312c736a49d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"510022a85839a8409d1e6a519bb86ce71a84f30a\",\"lessThan\":\"f4746f2d79507f65cfbde11d3c39ee8338aa50af\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"510022a85839a8409d1e6a519bb86ce71a84f30a\",\"lessThan\":\"f9ce2f550d53d044ecfb5ce996406cf42cd6b84d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"510022a85839a8409d1e6a519bb86ce71a84f30a\",\"lessThan\":\"8be95cd607478d85fa4626e86f811e785905bcbf\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"510022a85839a8409d1e6a519bb86ce71a84f30a\",\"lessThan\":\"bcefd0b0611f35b560d0a7281d87529fbe7a1e32\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"510022a85839a8409d1e6a519bb86ce71a84f30a\",\"lessThan\":\"884ee6dc85b959bc152f15bca80c30f06069e6c4\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/f2fs/f2fs.h\",\"fs/f2fs/namei.c\",\"include/linux/f2fs_fs.h\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.1\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.1\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.168\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.113\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.54\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.13\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11.2\",\"lessThanOrEqual\":\"6.11.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-21T13:06:03.889382Z\",\"id\":\"CVE-2024-47690\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.1\",\"versionEndExcluding\":\"5.15.168\",\"matchCriteriaId\":\"EAD5095E-29F5-4D9A-8FED-5082AD0A8A01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.113\",\"matchCriteriaId\":\"D01BD22E-ACD1-4618-9D01-6116570BE1EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.54\",\"matchCriteriaId\":\"D448821D-C085-4CAF-88FA-2DDE7BE21976\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.13\",\"matchCriteriaId\":\"CE94BB8D-B0AB-4563-9ED7-A12122B56EBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.11\",\"versionEndExcluding\":\"6.11.2\",\"matchCriteriaId\":\"AB755D26-97F4-43B6-8604-CD076811E181\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/884ee6dc85b959bc152f15bca80c30f06069e6c4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8be95cd607478d85fa4626e86f811e785905bcbf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bcefd0b0611f35b560d0a7281d87529fbe7a1e32\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e8d64f598eeb079c42a52deaa3a91312c736a49d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f4746f2d79507f65cfbde11d3c39ee8338aa50af\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f9ce2f550d53d044ecfb5ce996406cf42cd6b84d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T17:53:19+00:00",
      "cve": "CVE-2024-47690",
      "id": "CVE-2024-47690",
      "initial_release_date": "2024-10-21T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: f2fs: get rid of online repaire on corrupted directory",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-47690.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-05T00:52:07Z",
      "cve": "CVE-2024-47690",
      "id": "CVE-2024-47690",
      "initial_release_date": "2024-10-21T15:47:37Z",
      "product_status:known_not_affected": "402",
      "product_status:recommended": "6",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-47690",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-47690.json",
      "version": "26"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:20:55.203Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-47690\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-21T13:06:03.889382Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-21T13:06:07.093Z\"}}], \"cna\": {\"title\": \"f2fs: get rid of online repaire on corrupted directory\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"510022a85839a8409d1e6a519bb86ce71a84f30a\", \"lessThan\": \"e8d64f598eeb079c42a52deaa3a91312c736a49d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"510022a85839a8409d1e6a519bb86ce71a84f30a\", \"lessThan\": \"f4746f2d79507f65cfbde11d3c39ee8338aa50af\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"510022a85839a8409d1e6a519bb86ce71a84f30a\", \"lessThan\": \"f9ce2f550d53d044ecfb5ce996406cf42cd6b84d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"510022a85839a8409d1e6a519bb86ce71a84f30a\", \"lessThan\": \"8be95cd607478d85fa4626e86f811e785905bcbf\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"510022a85839a8409d1e6a519bb86ce71a84f30a\", \"lessThan\": \"bcefd0b0611f35b560d0a7281d87529fbe7a1e32\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"510022a85839a8409d1e6a519bb86ce71a84f30a\", \"lessThan\": \"884ee6dc85b959bc152f15bca80c30f06069e6c4\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/f2fs/f2fs.h\", \"fs/f2fs/namei.c\", \"include/linux/f2fs_fs.h\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.1\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.15.168\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.113\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.54\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.13\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/f2fs/f2fs.h\", \"fs/f2fs/namei.c\", \"include/linux/f2fs_fs.h\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e8d64f598eeb079c42a52deaa3a91312c736a49d\"}, {\"url\": \"https://git.kernel.org/stable/c/f4746f2d79507f65cfbde11d3c39ee8338aa50af\"}, {\"url\": \"https://git.kernel.org/stable/c/f9ce2f550d53d044ecfb5ce996406cf42cd6b84d\"}, {\"url\": \"https://git.kernel.org/stable/c/8be95cd607478d85fa4626e86f811e785905bcbf\"}, {\"url\": \"https://git.kernel.org/stable/c/bcefd0b0611f35b560d0a7281d87529fbe7a1e32\"}, {\"url\": \"https://git.kernel.org/stable/c/884ee6dc85b959bc152f15bca80c30f06069e6c4\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: get rid of online repaire on corrupted directory\\n\\nsyzbot reports a f2fs bug as below:\\n\\nkernel BUG at fs/f2fs/inode.c:896!\\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\\nCall Trace:\\n evict+0x532/0x950 fs/inode.c:704\\n dispose_list fs/inode.c:747 [inline]\\n evict_inodes+0x5f9/0x690 fs/inode.c:797\\n generic_shutdown_super+0x9d/0x2d0 fs/super.c:627\\n kill_block_super+0x44/0x90 fs/super.c:1696\\n kill_f2fs_super+0x344/0x690 fs/f2fs/super.c:4898\\n deactivate_locked_super+0xc4/0x130 fs/super.c:473\\n cleanup_mnt+0x41f/0x4b0 fs/namespace.c:1373\\n task_work_run+0x24f/0x310 kernel/task_work.c:228\\n ptrace_notify+0x2d2/0x380 kernel/signal.c:2402\\n ptrace_report_syscall include/linux/ptrace.h:415 [inline]\\n ptrace_report_syscall_exit include/linux/ptrace.h:477 [inline]\\n syscall_exit_work+0xc6/0x190 kernel/entry/common.c:173\\n syscall_exit_to_user_mode_prepare kernel/entry/common.c:200 [inline]\\n __syscall_exit_to_user_mode_work kernel/entry/common.c:205 [inline]\\n syscall_exit_to_user_mode+0x279/0x370 kernel/entry/common.c:218\\n do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89\\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\\nRIP: 0010:f2fs_evict_inode+0x1598/0x15c0 fs/f2fs/inode.c:896\\n\\nOnline repaire on corrupted directory in f2fs_lookup() can generate\\ndirty data/meta while racing w/ readonly remount, it may leave dirty\\ninode after filesystem becomes readonly, however, checkpoint() will\\nskips flushing dirty inode in a state of readonly mode, result in\\nabove panic.\\n\\nLet\u0027s get rid of online repaire in f2fs_lookup(), and leave the work\\nto fsck.f2fs.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.168\", \"versionStartIncluding\": \"4.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.113\", \"versionStartIncluding\": \"4.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.54\", \"versionStartIncluding\": \"4.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.13\", \"versionStartIncluding\": \"4.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.2\", \"versionStartIncluding\": \"4.1\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12\", \"versionStartIncluding\": \"4.1\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:38:52.753Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-47690\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:38:52.753Z\", \"dateReserved\": \"2024-09-30T16:00:12.942Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T11:53:29.870Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.