Lucene search

K
cvelistLinuxCVELIST:CVE-2023-52682
HistoryMay 17, 2024 - 2:24 p.m.

CVE-2023-52682 f2fs: fix to wait on block writeback for post_read case

2024-05-1714:24:45
Linux
raw.githubusercontent.com
6
f2fs
vulnerability
block writeback
post_read
linux kernel

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to wait on block writeback for post_read case

If inode is compressed, but not encrypted, it missed to call
f2fs_wait_on_block_writeback() to wait for GCed page writeback
in IPU write path.

Thread A GC-Thread
- f2fs_gc
- do_garbage_collect
- gc_data_segment
- move_data_block
- f2fs_submit_page_write
migrate normal cluster’s block via
meta_inode’s page cache

  • f2fs_write_single_data_page
  • f2fs_do_write_data_page
  • f2fs_inplace_write_data
  • f2fs_submit_page_bio

IRQ

  • f2fs_read_end_io
    IRQ
    old data overrides new data due to
    out-of-order GC and common IO.
    - f2fs_read_end_io

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

Related for CVELIST:CVE-2023-52682