CVE-2023-52588

HIGH7.1

f2fs: fix to tag gcing flag on page during block migration

Published Mar 6, 2024

Modified 6 months ago

Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to tag gcing flag on page during block migration

It needs to add missing gcing flag on page during block migration, in order to garantee migrated data be persisted during checkpoint, otherwise out-of-order persistency between data and node may cause data corruption after SPOR.

Similar issue was fixed by commit 2d1fe8a86bf5 ("f2fs: fix to tag gcing flag on page during file defragment").

References

WEBhttps://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54dde WEBhttps://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44b WEBhttps://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515c WEBhttps://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136 WEBhttps://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2023-52588

CVSS Analysis

CVSS v3.1

7.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

HighA:H

7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Ecosystems

Timeline

PublishedMar 6, 2024

ModifiedJul 11, 2025