CVE-2024-47726
kernel: f2fs: fix to wait dio completion
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2024
Updated · September 13, 2026
Description
A flaw was found in the Linux kernel's f2fs component. This vulnerability occurs because the system fails to wait for all direct I/O (DIO) write operations to complete before removing a block. A local attacker could exploit this race condition, allowing a previous direct write operation to overwrite data in a block that has been reallocated and is being used by another file, leading to data corruption.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')