The vulnerability of the f2fs_write_compressed_pages() function in the fs/f2fs/compress.c module of the Linux kernel’s file system f2fs allows a hacker to cause a service failure.

🗓️ 04 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerability in f2fs_write_compressed_pages causes service failure from improper cleanup of resources.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2020-36775	26 Feb 202418:15	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux	3 May 202623:59	–	astralinux
Circl	CVE-2020-36775	26 Feb 202419:26	–	circl
CNNVD	Linux kernel security vulnerabilities	26 Feb 202400:00	–	cnnvd
CVE	CVE-2020-36775	26 Feb 202417:20	–	cve
Cvelist	CVE-2020-36775 f2fs: fix to avoid potential deadlock	26 Feb 202417:20	–	cvelist
Debian CVE	CVE-2020-36775	26 Feb 202417:20	–	debiancve
NVD	CVE-2020-36775	26 Feb 202418:15	–	nvd
OSV	DEBIAN-CVE-2020-36775	26 Feb 202418:15	–	osv
OSV	UBUNTU-CVE-2020-36775	26 Feb 202418:15	–	osv

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/df77fbd8c5b222c680444801ffd20e8bbc90a56e
git	www.git.kernel.org/stable/c/0478ccdc8ea016de1ebaf6fe6da0275c2b258c5b
git	www.git.kernel.org/stable/c/8e8542437bb4070423c9754d5ba270ffdbae8c8d
git	www.git.kernel.org/stable/c/df77fbd8c5b222c680444801ffd20e8bbc90a56e
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.189
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7
lore	www.lore.kernel.org/linux-cve-announce/2024022602-CVE-2020-36775-1cbe@gregkh/
lore	www.lore.kernel.org/linux-cve-announce/2024022602-CVE-2020-36775-1cbe@gregkh/T/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-36775

06 Dec 2024 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.6

CVSS 35.5

EPSS0.0017

f2fs vulnerability compressed pages bug resource cleanup flaw linux kernel vulnerability