CVE-2024-27032

f2fs: fix to avoid potential panic during recovery

State: Published
Severity: 6.3 Medium
Published: May 1, 2024
Updated: Oct 15, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid potential panic during recovery

During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic.

Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation.

Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b1020a546779139eec5d930e15ce534c1101b89c to before fe4de493572a4263554903bf9c3afc5c196e15f0Affected 2a7b12d4705bc308cf18eae2b69ec8db34881cc3 to before 8844b2f8a3f0c428b74672f9726f9950b1a7764cAffected b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c to before d034810d02a5af8eb74debe29877dcaf5f00fdd1Affected 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd to before f26091a981318b5b7451d61f99bc073a6af8db67Affected 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd to before 21ec68234826b1b54ab980a8df6e33c74cfbee58Affected bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8Affected 9fceaf8182d453639cddb7f4a6877a1e1564de39Affected 80c69f576ff39d6ae8a6e2107da3dc03b533759cAffected b4fb0807a1d60f8642a5fd62bd659cd6052eaf97Affected 6.1.77 to before 6.1.83Affected 6.6.16 to before 6.6.23Affected 6.7.4 to before 6.7.11Affected 4.19.307 to before 4.20Affected 5.4.269 to before 5.5Affected 5.10.210 to before 5.11Affected 5.15.149 to before 5.16Affected
LinuxLinux	6.8Affected before 6.8Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

b1020a546779139eec5d930e15ce534c1101b89c to before fe4de493572a4263554903bf9c3afc5c196e15f0Affected
2a7b12d4705bc308cf18eae2b69ec8db34881cc3 to before 8844b2f8a3f0c428b74672f9726f9950b1a7764cAffected
b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c to before d034810d02a5af8eb74debe29877dcaf5f00fdd1Affected
956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd to before f26091a981318b5b7451d61f99bc073a6af8db67Affected
956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd to before 21ec68234826b1b54ab980a8df6e33c74cfbee58Affected
bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8Affected
9fceaf8182d453639cddb7f4a6877a1e1564de39Affected
80c69f576ff39d6ae8a6e2107da3dc03b533759cAffected
b4fb0807a1d60f8642a5fd62bd659cd6052eaf97Affected
6.1.77 to before 6.1.83Affected
6.6.16 to before 6.6.23Affected
6.7.4 to before 6.7.11Affected
4.19.307 to before 4.20Affected
5.4.269 to before 5.5Affected
5.10.210 to before 5.11Affected
5.15.149 to before 5.16Affected

LinuxLinux

6.8Affected
before 6.8Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.