PT-2024-14691 · Linux+5 · Linux Kernel+5

Published 2024-05-17 · Updated 2026-05-26 · CVE-2023-52682

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when an inode is compressed but not encrypted, and the system fails to call f2fs wait on block writeback() to wait for GCed page writeback in the IPU write path. This can lead to old data overriding new data due to out-of-order GC and common IO. The problem involves several functions, including f2fs gc, do garbage collect, gc data segment, move data block, f2fs submit page write, f2fs write single data page, f2fs do write data page, f2fs inplace write data, f2fs submit page bio, and f2fs read end io.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-399

CWE-125

Related Identifiers

BDU:2025-13351

CVE-2023-52682

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 188

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52682.json · Exploit
• https://osv.dev/vulnerability/USN-6819-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52598 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52686 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52465 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26610 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26607 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52682 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52682 · Security Note
• https://ubuntu.com/security/CVE-2023-52697 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35837 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35841 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6819-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52608 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52462 · Vendor Advisory