CVEvulnerability
CVE-2024-27032
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-05-01
- Last modified
- 2026-10-15
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
- Weaknesses
- CWE-835
Description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid potential panic during recovery
During recovery, if FAULT_BLOCK is on, it is possible that
f2fs_reserve_new_block() will return -ENOSPC during recovery,
then it may trigger panic.
Also, if fault injection rate is 1 and only FAULT_BLOCK fault
type is on, it may encounter deadloop in loop of block reservation.
Let's change as below to fix these issues:
- remove bug_on() to avoid panic.
- limit the loop count of block reservation to avoid potential
deadloop.
Affected configurations
• linux linux kernel (>= 4.19.307 < 4.20)
• linux linux kernel (>= 5.4.269 < 5.5)
• linux linux kernel (>= 5.10.210 < 5.11)
• linux linux kernel (>= 5.15.149 < 5.16)
• linux linux kernel (>= 6.1.77 < 6.1.83)
• linux linux kernel (>= 6.6.16 < 6.6.23)
• linux linux kernel (>= 6.7.4 < 6.7.11)
• linux linux kernel (>= 6.8 < 6.8.2)
Related
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness
References
- https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58 Patch
- https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c Patch
- https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1 Patch
- https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67 Patch
- https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0 Patch
- https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58 Patch
- https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c Patch
- https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1 Patch
- https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67 Patch
- https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0 Patch
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html cert-portal.siemens.com