CVE-2024-26869

High

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gc_data_segment - ra_data_block - locked meta_inode page - f2fs_inplace_write_data - invalidate_mapping_pages : fail to invalidate meta_inode page due to lock failure or dirty|writeback status - f2fs_submit_page_bio : write last dirty data to old blkaddr - move_data_block - load old data from meta_inode page - f2fs_submit_page_write : write old data to new blkaddr Because invalidate_mapping_pages() will skip invalidating page which has unclear status including locked, dirty, writeback and so on, so we need to use truncate_inode_pages_range() instead of invalidate_mapping_pages() to make sure meta_inode page will be dropped.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux Kernel
PublishedApr 17, 2024
First seenApr 17, 2024

How to fix

Update
  • linux linux_kernel6.6.23, 6.7.11, 6.8.2 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel4.19 ≤ v < 6.6.23, 6.7 ≤ v < 6.7.11, 6.8 ≤ v < 6.8.26.6.23, 6.7.11, 6.8.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.