---
id: CVE-2024-33847
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: compress: don't allow unaligned truncation on released compress inode

  f2fs image may be corrupted after below testcase:
  - mkfs.f2fs -O extra_attr,compression -f …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  f2fs: compress: don't allow unaligned truncation on released compress inode

  f2fs image may be corrupted after below testcase:
  - mkfs.f2fs -O extra_attr,compression -f …
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.14, < 5.15.161'
  - 'linux_kernel >= 5.16, < 6.1.93'
  - 'linux_kernel >= 6.2, < 6.6.33'
  - 'linux_kernel >= 6.7, < 6.9.4'
patched:
  - linux_kernel 6.9.4
published: '2024-06-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:17:45.260'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-33847'
references:
  - url: 'https://git.kernel.org/stable/c/29ed2b5dd521ce7c5d8466cd70bf0cc9d07afeee'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3ccf5210dc941a7aa0180596ac021568be4d35ec'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5268241b41b1c5d0acca75e9b97d4fd719251c8c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8acae047215024d1ac499b3c8337ef1b952f160b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9f9341064a9b5246a32a7fe56b9f80c6f7f3c62d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b8962cf98595d1ec62f40f23667de830567ec8bc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/29ed2b5dd521ce7c5d8466cd70bf0cc9d07afeee'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/3ccf5210dc941a7aa0180596ac021568be4d35ec'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/5268241b41b1c5d0acca75e9b97d4fd719251c8c'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/8acae047215024d1ac499b3c8337ef1b952f160b'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/9f9341064a9b5246a32a7fe56b9f80c6f7f3c62d'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/b8962cf98595d1ec62f40f23667de830567ec8bc'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00228
epssPercentile: 0.13434
ingestedAt: '2026-10-15T03:30:12.714Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-06-25T13:51:44.928910Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

f2fs: compress: don't allow unaligned truncation on released compress inode

f2fs image may be corrupted after below testcase:
- mkfs.f2fs -O extra_attr,compression -f /dev/vdb
- mount /dev/vdb /mnt/f2fs
- touch /mnt/f2fs/file
- f2fs_io setflags compression /mnt/f2fs/file
- dd if=/dev/zero of=/mnt/f2fs/file bs=4k count=4
- f2fs_io release_cblocks /mnt/f2fs/file
- truncate -s 8192 /mnt/f2fs/file
- umount /mnt/f2fs
- fsck.f2fs /dev/vdb

[ASSERT] (fsck_chk_inode_blk:1256)  --> ino: 0x5 has i_blocks: 0x00000002, but has 0x3 blocks
[FSCK] valid_block_count matching with CP             [Fail] [0x4, 0x5]
[FSCK] other corrupted bugs                           [Fail]

The reason is: partial truncation assume compressed inode has reserved
blocks, after partial truncation, valid block count may change w/o
.i_blocks and .total_valid_block_count update, result in corruption.

This patch only allow cluster size aligned truncation on released
compress inode for fixing.

## Affected

- `linux_kernel >= 5.14, < 5.15.161`
- `linux_kernel >= 5.16, < 6.1.93`
- `linux_kernel >= 6.2, < 6.6.33`
- `linux_kernel >= 6.7, < 6.9.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.9.4`