CVE-2024-26869

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> f2fs: fix to truncate meta inode pages forcely<br /> <br /> Below race case can cause data corruption:<br /> <br /> Thread A GC thread<br /> - gc_data_segment<br /> - ra_data_block<br /> - locked meta_inode page<br /> - f2fs_inplace_write_data<br /> - invalidate_mapping_pages<br /> : fail to invalidate meta_inode page<br /> due to lock failure or dirty|writeback<br /> status<br /> - f2fs_submit_page_bio<br /> : write last dirty data to old blkaddr<br /> - move_data_block<br /> - load old data from meta_inode page<br /> - f2fs_submit_page_write<br /> : write old data to new blkaddr<br /> <br /> Because invalidate_mapping_pages() will skip invalidating page which<br /> has unclear status including locked, dirty, writeback and so on, so<br /> we need to use truncate_inode_pages_range() instead of<br /> invalidate_mapping_pages() to make sure meta_inode page will be dropped.