{"api_version":"1","generated_at":"2026-07-23T14:32:06+00:00","cve":"CVE-2024-34027","urls":{"html":"https://cve.report/CVE-2024-34027","api":"https://cve.report/api/cve/CVE-2024-34027.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2024-34027","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-34027"},"summary":{"title":"f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock\n\nIt needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock\nto avoid racing with checkpoint, otherwise, filesystem metadata including\nblkaddr in dnode, inode fields and .total_valid_block_count may be\ncorrupted after SPO case.","state":"PUBLISHED","assigner":"Linux","published_at":"2024-06-24 14:15:11","updated_at":"2026-05-12 12:16:35"},"problem_types":["CWE-770","CWE-770 CWE-770 Allocation of Resources Without Limits or Throttling"],"metrics":[{"version":"3.1","source":"ADP","type":"DECLARED","score":"7","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"7","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"references":[{"url":"https://git.kernel.org/stable/c/0a4ed2d97cb6d044196cc3e726b6699222b41019","name":"https://git.kernel.org/stable/c/0a4ed2d97cb6d044196cc3e726b6699222b41019","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/5d47d63883735718825ca2efc4fca6915469774f","name":"https://git.kernel.org/stable/c/5d47d63883735718825ca2efc4fca6915469774f","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/69136304fd144144a4828c7b7b149d0f80321ba4","name":"https://git.kernel.org/stable/c/69136304fd144144a4828c7b7b149d0f80321ba4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","name":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","refsource":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/a6e1f7744e9b84f86a629a76024bba8468aa153b","name":"https://git.kernel.org/stable/c/a6e1f7744e9b84f86a629a76024bba8468aa153b","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/b5bac43875aa27ec032dbbb86173baae6dce6182","name":"https://git.kernel.org/stable/c/b5bac43875aa27ec032dbbb86173baae6dce6182","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b","name":"https://git.kernel.org/stable/c/329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34027","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34027","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected ef8d563f184e1112651f2cbde383d43e599334e8 a6e1f7744e9b84f86a629a76024bba8468aa153b git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected ef8d563f184e1112651f2cbde383d43e599334e8 b5bac43875aa27ec032dbbb86173baae6dce6182 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected ef8d563f184e1112651f2cbde383d43e599334e8 5d47d63883735718825ca2efc4fca6915469774f git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected ef8d563f184e1112651f2cbde383d43e599334e8 329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected ef8d563f184e1112651f2cbde383d43e599334e8 69136304fd144144a4828c7b7b149d0f80321ba4 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected ef8d563f184e1112651f2cbde383d43e599334e8 0a4ed2d97cb6d044196cc3e726b6699222b41019 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.8","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.8 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.10.219 5.10.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.15.161 5.15.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.1.93 6.1.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.6.33 6.6.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.9.4 6.9.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.10 * original_commit_for_fix","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected c75488fb4d82 a6e1f7744e9b git","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected c75488fb4d82 b5bac43875aa git","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected c75488fb4d82 5d47d6388373 git","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected c75488fb4d82 329edb7c9e3b git","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected c75488fb4d82 69136304fd14 git","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected c75488fb4d82 0a4ed2d97cb6 git","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 5.8","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 5.8 semver","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 5.10.219 5.10* semver","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 6.1.93 6.1* semver","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 6.6.33 6.6* semver","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 6.94 6.9* semver","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 6.10 * semver","platforms":[]},{"source":"ADP","vendor":"linux","product":"linux_kernel","version":"affected 5.15.161 5.15* custom","platforms":[]},{"source":"ADP","vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","version":"affected * custom","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2024","cve_id":"34027","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"linux_kernel","vendor":"linux","versions":[{"lessThan":"a6e1f7744e9b","status":"affected","version":"c75488fb4d82","versionType":"git"},{"lessThan":"b5bac43875aa","status":"affected","version":"c75488fb4d82","versionType":"git"},{"lessThan":"5d47d6388373","status":"affected","version":"c75488fb4d82","versionType":"git"},{"lessThan":"329edb7c9e3b","status":"affected","version":"c75488fb4d82","versionType":"git"},{"lessThan":"69136304fd14","status":"affected","version":"c75488fb4d82","versionType":"git"},{"lessThan":"0a4ed2d97cb6","status":"affected","version":"c75488fb4d82","versionType":"git"},{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"affected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10*","status":"affected","version":"5.10.219","versionType":"semver"},{"lessThanOrEqual":"6.1*","status":"affected","version":"6.1.93","versionType":"semver"},{"lessThanOrEqual":"6.6*","status":"affected","version":"6.6.33","versionType":"semver"},{"lessThanOrEqual":"6.9*","status":"affected","version":"6.94","versionType":"semver"},{"lessThanOrEqual":"*","status":"affected","version":"6.10","versionType":"semver"},{"lessThanOrEqual":"5.15*","status":"affected","version":"5.15.161","versionType":"custom"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2024-34027","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-11-05T14:50:20.784869Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-770","description":"CWE-770 Allocation of Resources Without Limits or Throttling","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-11-05T15:02:49.178Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2024-08-02T02:42:59.794Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/a6e1f7744e9b84f86a629a76024bba8468aa153b"},{"tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/b5bac43875aa27ec032dbbb86173baae6dce6182"},{"tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/5d47d63883735718825ca2efc4fca6915469774f"},{"tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b"},{"tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/69136304fd144144a4828c7b7b149d0f80321ba4"},{"tags":["x_transferred"],"url":"https://git.kernel.org/stable/c/0a4ed2d97cb6d044196cc3e726b6699222b41019"}],"title":"CVE Program Container"},{"affected":[{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]}],"providerMetadata":{"dateUpdated":"2026-05-12T11:51:57.302Z","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP"},"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"x_adpType":"supplier"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/f2fs/file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a6e1f7744e9b84f86a629a76024bba8468aa153b","status":"affected","version":"ef8d563f184e1112651f2cbde383d43e599334e8","versionType":"git"},{"lessThan":"b5bac43875aa27ec032dbbb86173baae6dce6182","status":"affected","version":"ef8d563f184e1112651f2cbde383d43e599334e8","versionType":"git"},{"lessThan":"5d47d63883735718825ca2efc4fca6915469774f","status":"affected","version":"ef8d563f184e1112651f2cbde383d43e599334e8","versionType":"git"},{"lessThan":"329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b","status":"affected","version":"ef8d563f184e1112651f2cbde383d43e599334e8","versionType":"git"},{"lessThan":"69136304fd144144a4828c7b7b149d0f80321ba4","status":"affected","version":"ef8d563f184e1112651f2cbde383d43e599334e8","versionType":"git"},{"lessThan":"0a4ed2d97cb6d044196cc3e726b6699222b41019","status":"affected","version":"ef8d563f184e1112651f2cbde383d43e599334e8","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["fs/f2fs/file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.219","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.161","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.93","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.33","versionType":"semver"},{"lessThanOrEqual":"6.9.*","status":"unaffected","version":"6.9.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.10","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.219","versionStartIncluding":"5.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.161","versionStartIncluding":"5.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.93","versionStartIncluding":"5.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.33","versionStartIncluding":"5.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.9.4","versionStartIncluding":"5.8","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.10","versionStartIncluding":"5.8","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock\n\nIt needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock\nto avoid racing with checkpoint, otherwise, filesystem metadata including\nblkaddr in dnode, inode fields and .total_valid_block_count may be\ncorrupted after SPO case."}],"providerMetadata":{"dateUpdated":"2026-05-11T20:10:54.703Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/a6e1f7744e9b84f86a629a76024bba8468aa153b"},{"url":"https://git.kernel.org/stable/c/b5bac43875aa27ec032dbbb86173baae6dce6182"},{"url":"https://git.kernel.org/stable/c/5d47d63883735718825ca2efc4fca6915469774f"},{"url":"https://git.kernel.org/stable/c/329edb7c9e3b6ca27e6ca67ab1cdda1740fb3a2b"},{"url":"https://git.kernel.org/stable/c/69136304fd144144a4828c7b7b149d0f80321ba4"},{"url":"https://git.kernel.org/stable/c/0a4ed2d97cb6d044196cc3e726b6699222b41019"}],"title":"f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2024-34027","datePublished":"2024-06-24T13:56:49.389Z","dateReserved":"2024-06-24T13:54:11.051Z","dateUpdated":"2026-05-12T11:51:57.302Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2024-06-24 14:15:11","lastModifiedDate":"2026-05-12 12:16:35","problem_types":["CWE-770","CWE-770 CWE-770 Allocation of Resources Without Limits or Throttling"],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1,"impactScore":5.9}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.8","versionEndExcluding":"5.10.219","matchCriteriaId":"A3C0D860-7856-4982-83DA-17AFB1195E02"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.11","versionEndExcluding":"5.15.161","matchCriteriaId":"31130639-53FE-4726-8986-434EE2528CB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.1.93","matchCriteriaId":"EEFB78EE-F990-4197-BF1C-156760A55667"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","versionEndExcluding":"6.6.33","matchCriteriaId":"FCE796DF-3B50-4DC6-BAE5-95271068FC9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7","versionEndExcluding":"6.9.4","matchCriteriaId":"991B9791-966A-4D18-9E8D-A8AB128E5627"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2024","CveId":"34027","Ordinal":"1","Title":"f2fs: compress: fix to cover {reserve,release}_compress_blocks()","CVE":"CVE-2024-34027","Year":"2024"},"notes":[{"CveYear":"2024","CveId":"34027","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock\n\nIt needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock\nto avoid racing with checkpoint, otherwise, filesystem metadata including\nblkaddr in dnode, inode fields and .total_valid_block_count may be\ncorrupted after SPO case.","Type":"Description","Title":"f2fs: compress: fix to cover {reserve,release}_compress_blocks()"}]}}}