CVE-2024-27034

CVE-2024-27034 : In the Linux kernel, the f2fs compression path had a fix for normal cluster writes overlapped with compressed clusters. If a compressed cluster is overwritten by a normal cluster, unlocking cp_rwsem during f2fs_write_raw_pages() could cause data corruption when partial blocks wer...

CVE-2024-27034 f2fs: compress: fix to cover normal cluster write with cp_rwsem

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover normal cluster write with cprwsem When we overwrite compressed cluster w/ normal cluster, we should not unlock cprwsem during f2fswriterawpages, otherwise data will be corrupted if partial blocks were...

CVE-2024-27034 f2fs: compress: fix to cover normal cluster write with cp_rwsem

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover normal cluster write with cprwsem When we overwrite compressed cluster w/ normal cluster, we should not unlock cprwsem during f2fswriterawpages, otherwise data will be corrupted if partial blocks were...

CVE-2024-27034

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover normal cluster write with cprwsem When we overwrite compressed cluster w/ normal cluster, we should not unlock cprwsem during f2fswriterawpages, otherwise data will be corrupted if partial blocks were...

CVE-2024-27033 f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to remove unnecessary f2fsbugon to avoid panic verifyblkaddr will trigger panic once we inject fault into f2fsisvalidblkaddr, fix to remove this unnecessary f2fsbugon...

CVE-2024-27033 f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to remove unnecessary f2fsbugon to avoid panic verifyblkaddr will trigger panic once we inject fault into f2fsisvalidblkaddr, fix to remove this unnecessary f2fsbugon...

CVE-2024-27033

The CVE-2024-27033 issue affects the Linux kernel’s f2fs filesystem code. The root cause described in the sources is a panic when verify_blkaddr() could be triggered due to a fault injected into f2fs_is_valid_blkaddr(), prompting removal of an unnecessary f2fs_bug_on() call. The advisory notes th...

CVE-2024-27033 f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to remove unnecessary f2fsbugon to avoid panic verifyblkaddr will trigger panic once we inject fault into f2fsisvalidblkaddr, fix to remove this unnecessary f2fsbugon...

CVE-2024-27033

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to remove unnecessary f2fsbugon to avoid panic verifyblkaddr will trigger panic once we inject fault into f2fsisvalidblkaddr, fix to remove this unnecessary f2fsbugon...

CVE-2024-27032 f2fs: fix to avoid potential panic during recovery

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 a...

CVE-2024-27032 f2fs: fix to avoid potential panic during recovery

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 a...

CVE-2024-27032 f2fs: fix to avoid potential panic during recovery

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 a...

CVE-2024-27032

CVE-2024-27032 affects the Linux kernel f2fs subsystem. During recovery, if FAULT_BLOCK is enabled, f2fs_reserve_new_block() may return -ENOSPC, potentially causing a kernel panic. Additionally, with fault-injection rate 1 and only FAULT_BLOCK enabled, a deadloop in block reservation may occur. T...

CVE-2024-27032

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an error injected into the f2fsisvalidblkaddr function, where the verifyblkaddr function will trigger a pani...

CLSA-2024-1713790844 Fix of 12 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-23307 - md/raid5: fix atomicity violation in raid5cachecount CVE-url: https://ubuntu.com/security/CVE-2021-46932 - Input: appletouch - initialize work before device registration CVE-url: https://ubuntu.com/security/CVE-2021-46936 - net: fix...

SUSE CVE-2024-26871

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix NULL pointer dereference in f2fssubmitpagewrite BUG: kernel NULL pointer dereference, address: 0000000000000014 RIP: 0010:f2fssubmitpagewrite+0x6cf/0x780 f2fs Call Trace: ? showregs+0x6e/0x80 ? die+0x29/0x70 ?...

CVE-2024-26869

A vulnerability was found in the f2fs component in the Linux kernel, where a race condition can be created between the garbage collection thread and the f2fsinplacewritedata thread. This could lead to data corruption or system instability. Mitigation Mitigation for this issue is either not...

USN-6726-3: Linux kernel (Xilinx ZynqMP) vulnerabilities

Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...

CVE-2024-26869

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...