CVE-2024-27035: linux-libc-dev - f2fs: compress: fix to guarantee persisting compressed blocks by CP
Summary
CVE-2024-27035: In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in compressed cluster is not persisted with metadata during checkpoint... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the necessary header files and libraries for compiling programs that use the Linux kernel interfaces. It is an essential component for building and running applications on Linux systems. This vulnerability affects the linux-libc-dev package version 6.1.90-1.
Vulnerability Detail
The vulnerability (CVE-2024-27035) in the linux-libc-dev package is related to the f2fs (Flash-Friendly File System) module in the Linux kernel. The issue has been resolved with a fix that ensures the persistence of compressed blocks by CP (Checkpoint). If a data block in a compressed cluster is not persisted with metadata during a checkpoint, it may lead to data corruption after a sudden power-off and recovery (SPOR). The fix guarantees the writing of compressed pages by the checkpoint mechanism.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Applying the fix by updating the linux-libc-dev package is the recommended solution.
Conclusion
The linux-libc-dev package version 6.1.90-1 is affected by a vulnerability (CVE-2024-27035) related to the f2fs module in the Linux kernel. The issue has been resolved with a fix that guarantees the persistence of compressed blocks by CP. To mitigate the vulnerability, it is recommended to update the linux-libc-dev package to a version that includes the fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package provides header files and libraries for compiling programs that use Linux kernel interfaces. It is essential for building and running applications on Linux systems.
f2fs (Flash-Friendly File System) is a file system module in the Linux kernel designed for NAND-based flash memory storage devices. It provides features optimized for flash storage, such as wear-leveling and garbage collection.
A checkpoint is a mechanism in the f2fs module that ensures the consistency and durability of data on the file system. It periodically saves the state of the file system to persistent storage, allowing recovery after unexpected events like power failures.
If the compressed data blocks are not persisted with metadata during a checkpoint, data corruption may occur after a sudden power-off and recovery. This can lead to data loss or incorrect data interpretation by applications.
There is no information available about any known exploits targeting this specific vulnerability at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
