CVE-2024-27032f2fs: fix to avoid potential panic during recovery
- 6.3MediumCVSS base score
- 0.29%Exploitation in 30 daysEPSS · top 78% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.
Timeline
ID reserved
By Linux
- 2 months later
· 2 months later
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium6.3 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium6.3 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.29% · top 78% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.3.
Affected products
- affected b1020a546779139eec5d930e15ce534c1101b89c – < fe4de493572a4263554903bf9c3afc5c196e15f0
- affected 2a7b12d4705bc308cf18eae2b69ec8db34881cc3 – < 8844b2f8a3f0c428b74672f9726f9950b1a7764c
- affected b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c – < d034810d02a5af8eb74debe29877dcaf5f00fdd1
- affected 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd – < f26091a981318b5b7451d61f99bc073a6af8db67
- affected 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd – < 21ec68234826b1b54ab980a8df6e33c74cfbee58
- affected bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8
- affected 9fceaf8182d453639cddb7f4a6877a1e1564de39
- affected 80c69f576ff39d6ae8a6e2107da3dc03b533759c
- affected b4fb0807a1d60f8642a5fd62bd659cd6052eaf97
- affected 6.1.77 – < 6.1.83
- affected 6.6.16 – < 6.6.23
- affected 6.7.4 – < 6.7.11
- affected 4.19.307 – < 4.20
- affected 5.4.269 – < 5.5
- affected 5.10.210 – < 5.11
- affected 5.15.149 – < 5.16
- affected 6.8
- unaffected < 6.8
- unaffected 6.1.83 – ≤ 6.1.*
- unaffected 6.6.23 – ≤ 6.6.*
- unaffected 6.7.11 – ≤ 6.7.*
- unaffected 6.8.2 – ≤ 6.8.*
- unaffected 6.9 – ≤ *
References
References6
- https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58 (opens in a new tab)x_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-24294 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-27032)Record last updated .