CVE-2024-27032: f2fs: fix to avoid potential panic during recovery

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-01 · updated 2026-10-15
Weakness: CWE-835

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.

Affected products

Linux kernel: from 4.19.307 before 4.20; from 5.4.269 before 5.5; from 5.10.210 before 5.11; from 5.15.149 before 5.16; from 6.1.77 before 6.1.83; from 6.6.16 before 6.6.23 — fixed in 4.20, 5.11, 5.16, 5.5, 6.1.83, 6.6.23

How to fix

Upgrade to a fixed version: Linux kernel 4.20, 5.11, 5.16, 5.5. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-27032 or the next vulnerability affects your stack