What is CVE-2024-27035?

CVE-2024-27035 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, affecting Linux kernel versions from 5.6 onward and patched in 6.1.83, 6.6.23, 6.7.11 and others. CVE-2024-27035 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-27035?

CVE-2024-27035 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2024-27035?

Yes, CVE-2024-27035 has been patched. Fixed versions include 6.1.83, 6.6.23, 6.7.11 and others. If you are running Linux kernel 5.6 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-27035 actively exploited?

CVE-2024-27035 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-27035

Medium

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to guarantee persisting compressed blocks by CP If data block in compressed cluster is not persisted with metadata during checkpoint, after SPOR, the data may be corrupted, let's guarantee to write compressed page by checkpoint.

Package Linux Kernel

Published 2024-05-01

Last modified 2025-09-18

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected versions

Linux kernel versions 5.6 and later are affected. Fixed in 6.1.83, 6.6.23, 6.7.11, 6.8.2, 6.9 and their respective stable series.

Affected from

≥ 5.6

Fixed in

✓ 6.1.83 6.1.x ✓ 6.6.23 6.6.x ✓ 6.7.11 6.7.x ✓ 6.8.2 6.8.x ✓ 6.9

References

5 total

Kernel Git
https://git.kernel.org/stable/c/57e8b17d0522c8f4daf0c4d9969b4d7358033532

Patch
Kernel Git
https://git.kernel.org/stable/c/82704e598d7b33c7e45526e34d3c585426319bed

Patch
Kernel Git
https://git.kernel.org/stable/c/8a430dd49e9cb021372b0ad91e60aeef9c6ced00

Patch
Kernel Git
https://git.kernel.org/stable/c/c3311694b9bcced233548574d414c91d39214684

Patch
Kernel Git
https://git.kernel.org/stable/c/e54cce8137258a550b49cae45d09e024821fb28d

Patch

Details

CVE ID CVE-2024-27035

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2024-05-01

Modified 2025-09-18

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-27035?

CVE-2024-27035 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 . It affects Linux kernel versions from 5.6 onward and has been patched in 6.1.83, 6.6.23, 6.7.11 and others. CVE-2024-27035 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-27035?

CVE-2024-27035 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2024-27035?

Yes. CVE-2024-27035 has been patched. Fixed versions include 6.1.83, 6.6.23, 6.7.11 and others. If you are running Linux kernel 5.6 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-27035 actively exploited?

No. CVE-2024-27035 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.