PT-2024-14691
CVE-2023-52682
·
Published
2024-05-17
·
Updated
2026-10-09
Description by
CVSS 3.1
7.1
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises when an inode is compressed but not encrypted, and the system fails to call
f2fs wait on block writeback() to wait for GCed page writeback in the IPU write path. This can lead to old data overriding new data due to out-of-order GC and common IO. The problem involves several functions, including f2fs gc, do garbage collect, gc data segment, move data block, f2fs submit page write, f2fs write single data page, f2fs do write data page, f2fs inplace write data, f2fs submit page bio, and f2fs read end io.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾