High 7.8Published Jun 24, 2024

CVE-2024-34027f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

Updated under an hour ago (Oct 27, 2026, 11:10 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .total_valid_block_count may be corrupted after SPO case.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-770
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ef8d563f184e1112651f2cbde383d43e599334e8 before a6e1f7744e9b84f86a629a76024bba8468aa153b; from ef8d563f184e1112651f2cbde383d43e599334e8 before b5bac43875aa27ec032dbbb86173baae6dce6182; from ef8d563f184e1112651f2cbde383d43e599334e8 before 5d47d63883735718825ca2efc4fca6915469774f; from ef8d563f184e1112651f2cbde383d43e599334e8 before 329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b; from ef8d563f184e1112651f2cbde383d43e599334e8 before 69136304fd144144a4828c7b7b149d0f80321ba4; from ef8d563f184e1112651f2cbde383d43e599334e8 before 0a4ed2d97cb6d044196cc3e726b6699222b41019	CNA record
linux linux_kernel linux:linux_kernel	from c75488fb4d82 before a6e1f7744e9b; from c75488fb4d82 before b5bac43875aa; from c75488fb4d82 before 5d47d6388373; from c75488fb4d82 before 329edb7c9e3b; from c75488fb4d82 before 69136304fd14; from c75488fb4d82 before 0a4ed2d97cb6; 5.8; before 5.8; and 6 more ranges	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.8 before 5.10.219; from 5.11 before 5.15.161; from 5.16 before 6.1.93; from 6.2 before 6.6.33; from 6.7 before 6.9.4	NVD

References

References

https://git.kernel.org/stable/c/a6e1f7744e9b84f86a629a76024bba8468aa153b	patch
https://git.kernel.org/stable/c/b5bac43875aa27ec032dbbb86173baae6dce6182	patch
https://git.kernel.org/stable/c/5d47d63883735718825ca2efc4fca6915469774f	patch
https://git.kernel.org/stable/c/329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b	patch
https://git.kernel.org/stable/c/69136304fd144144a4828c7b7b149d0f80321ba4	patch
https://git.kernel.org/stable/c/0a4ed2d97cb6d044196cc3e726b6699222b41019	patch
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.