CVEvulnerability

CVE-2024-27032

6.3 MEDIUM Published 2024-05-01 Modified 2026-10-15 Official page ↗
Status
Modified
Published
2024-05-01
Last modified
2026-10-15
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-835

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.

Affected configurations

• linux linux kernel (>= 4.19.307 < 4.20) • linux linux kernel (>= 5.4.269 < 5.5) • linux linux kernel (>= 5.10.210 < 5.11) • linux linux kernel (>= 5.15.149 < 5.16) • linux linux kernel (>= 6.1.77 < 6.1.83) • linux linux kernel (>= 6.6.16 < 6.6.23) • linux linux kernel (>= 6.7.4 < 6.7.11) • linux linux kernel (>= 6.8 < 6.8.2)

Related

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References