CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2024-44941: f2fs: fix to cover read extent cache access with lock

highCVSS 7.8CVE-2024-44941

CSIRTS triage

product: Linux kernel f2fsMemory corruption
What
Read extent cache access in f2fs is not protected by lock, allowing concurrent modification.
Who is affected
Linux systems using the f2fs filesystem with active read extent caching.
Urgency
High; unexloited but race condition can cause data corruption or kernel crash; CVSS 7.8.
Action
Apply kernel patch to protect read extent cache access with appropriate locking.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel f2fs

Get an email when a new Linux kernel f2fs advisory drops — max one per day, one-click unsubscribe.

Details

Source
Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity
high — CVSS 7.8
Published
2026-08-06
Exploitation
Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-44941

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2024-44941coverage & exploitation statusNVD · CVE.org

Recent advisories for f2fs

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from Microsoft Security Response Center