Bug 2278465 (CVE-2024-27034)

Summary:	CVE-2024-27034 kernel: f2fs: compress: fix to cover normal cluster write with cp_rwsem
Product:	[Other] Security Response	Reporter:	Zack Miele <zmiele>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	acaringi, allarkin, aquini, bhu, chwhite, dbohanno, debarbos, dfreiber, drow, dvlasenk, esandeen, ezulian, hkrzesin, jarod, jburrell, jfaracco, jlelli, joe.lawrence, jshortt, jstancek, jwyatt, ldoskova, lgoncalv, mleitner, mmilgram, mstowell, nmurray, ptalbert, rhel-process-autobot, rparrazo, rrobaina, rvrbovsk, scweaver, sidakwo, sukulkar, tglozar, vkumar, watson-tool-maintainers, wcosta, williams, wmealing, ycote, ykopkova
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	kernel 5.15.153, kernel 6.1.83, kernel 6.6.23, kernel 6.7.11, kernel 6.8.2, kernel 6.9-rc1	Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in the Linux kernel's f2fs compression component. When overwriting a compressed cluster with a normal cluster, the `cp_rwsem` (read-write semaphore) was not properly locked during `f2fs_write_raw_pages()`. This concurrency issue could allow a local attacker to corrupt data if partial blocks were persisted before checkpoint (CP) and Superblock Operations (SPOR), as cluster metadata was not updated atomically. This can lead to data corruption.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2278466
Bug Blocks:	2278552

Description Zack Miele 2024-05-01 20:55:39 UTC

In the Linux kernel, the following vulnerability has been resolved:

f2fs: compress: fix to cover normal cluster write with cp_rwsem

The Linux kernel CVE team has assigned CVE-2024-27034 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024050111-CVE-2024-27034-5872@gregkh/T

Comment 1 Zack Miele 2024-05-01 20:56:17 UTC

Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2278466]

Comment 2 Alex 2024-06-09 12:39:35 UTC

The result of automatic check (that is developed by Alexander Larkin) for this CVE-2024-27034 is: 	SKIP	No affected files built, so skip this CVE	NO			-	-	unknown (where first YES/NO value means if related sources built).