GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-27032 (GCVE-0-2024-27032)

Vulnerability from cvelistv5 – Published: 2024-05-01 12:53 – Updated: 2026-05-23 15:41
VLAI
Title
f2fs: fix to avoid potential panic during recovery
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.
Severity
6.3 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-06-06 18:39 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: b1020a546779139eec5d930e15ce534c1101b89c , < fe4de493572a4263554903bf9c3afc5c196e15f0 (git)
Affected: 2a7b12d4705bc308cf18eae2b69ec8db34881cc3 , < 8844b2f8a3f0c428b74672f9726f9950b1a7764c (git)
Affected: b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c , < d034810d02a5af8eb74debe29877dcaf5f00fdd1 (git)
Affected: 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd , < f26091a981318b5b7451d61f99bc073a6af8db67 (git)
Affected: 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd , < 21ec68234826b1b54ab980a8df6e33c74cfbee58 (git)
Affected: bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8 (git)
Affected: 9fceaf8182d453639cddb7f4a6877a1e1564de39 (git)
Affected: 80c69f576ff39d6ae8a6e2107da3dc03b533759c (git)
Affected: b4fb0807a1d60f8642a5fd62bd659cd6052eaf97 (git)
Affected: 6.1.77 , < 6.1.83 (semver)
Affected: 6.6.16 , < 6.6.23 (semver)
Affected: 6.7.4 , < 6.7.11 (semver)
Affected: 4.19.307 , < 4.20 (semver)
Affected: 5.4.269 , < 5.5 (semver)
Affected: 5.10.210 , < 5.11 (semver)
Affected: 5.15.149 , < 5.16 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.8
Unaffected: 0 , < 6.8 (semver)
Unaffected: 6.1.83 , ≤ 6.1.* (semver)
Unaffected: 6.6.23 , ≤ 6.6.* (semver)
Unaffected: 6.7.11 , ≤ 6.7.* (semver)
Unaffected: 6.8.2 , ≤ 6.8.* (semver)
Unaffected: 6.9 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-27032",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-06T18:39:19.391888Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T18:49:40.908Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:21:05.863Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/f2fs.h",
            "fs/f2fs/recovery.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fe4de493572a4263554903bf9c3afc5c196e15f0",
              "status": "affected",
              "version": "b1020a546779139eec5d930e15ce534c1101b89c",
              "versionType": "git"
            },
            {
              "lessThan": "8844b2f8a3f0c428b74672f9726f9950b1a7764c",
              "status": "affected",
              "version": "2a7b12d4705bc308cf18eae2b69ec8db34881cc3",
              "versionType": "git"
            },
            {
              "lessThan": "d034810d02a5af8eb74debe29877dcaf5f00fdd1",
              "status": "affected",
              "version": "b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c",
              "versionType": "git"
            },
            {
              "lessThan": "f26091a981318b5b7451d61f99bc073a6af8db67",
              "status": "affected",
              "version": "956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd",
              "versionType": "git"
            },
            {
              "lessThan": "21ec68234826b1b54ab980a8df6e33c74cfbee58",
              "status": "affected",
              "version": "956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "9fceaf8182d453639cddb7f4a6877a1e1564de39",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "80c69f576ff39d6ae8a6e2107da3dc03b533759c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b4fb0807a1d60f8642a5fd62bd659cd6052eaf97",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.83",
              "status": "affected",
              "version": "6.1.77",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.23",
              "status": "affected",
              "version": "6.6.16",
              "versionType": "semver"
            },
            {
              "lessThan": "6.7.11",
              "status": "affected",
              "version": "6.7.4",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.307",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.269",
              "versionType": "semver"
            },
            {
              "lessThan": "5.11",
              "status": "affected",
              "version": "5.10.210",
              "versionType": "semver"
            },
            {
              "lessThan": "5.16",
              "status": "affected",
              "version": "5.15.149",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/f2fs.h",
            "fs/f2fs/recovery.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.8"
            },
            {
              "lessThan": "6.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.23",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.83",
                  "versionStartIncluding": "6.1.77",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.23",
                  "versionStartIncluding": "6.6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.11",
                  "versionStartIncluding": "6.7.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.2",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "6.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.307",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.269",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.10.210",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.15.149",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid potential panic during recovery\n\nDuring recovery, if FAULT_BLOCK is on, it is possible that\nf2fs_reserve_new_block() will return -ENOSPC during recovery,\nthen it may trigger panic.\n\nAlso, if fault injection rate is 1 and only FAULT_BLOCK fault\ntype is on, it may encounter deadloop in loop of block reservation.\n\nLet\u0027s change as below to fix these issues:\n- remove bug_on() to avoid panic.\n- limit the loop count of block reservation to avoid potential\ndeadloop."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:41:29.098Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0"
        },
        {
          "url": "https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c"
        },
        {
          "url": "https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1"
        },
        {
          "url": "https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67"
        },
        {
          "url": "https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58"
        }
      ],
      "title": "f2fs: fix to avoid potential panic during recovery",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-27032",
    "datePublished": "2024-05-01T12:53:32.812Z",
    "dateReserved": "2024-02-19T14:20:24.211Z",
    "dateUpdated": "2026-05-23T15:41:29.098Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-27032",
      "date": "2026-09-16",
      "epss": "0.00291",
      "percentile": "0.21686"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: fix to avoid potential panic during recovery\\n\\nDuring recovery, if FAULT_BLOCK is on, it is possible that\\nf2fs_reserve_new_block() will return -ENOSPC during recovery,\\nthen it may trigger panic.\\n\\nAlso, if fault injection rate is 1 and only FAULT_BLOCK fault\\ntype is on, it may encounter deadloop in loop of block reservation.\\n\\nLet\u0027s change as below to fix these issues:\\n- remove bug_on() to avoid panic.\\n- limit the loop count of block reservation to avoid potential\\ndeadloop.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: f2fs: correcci\\u00f3n para evitar un posible p\\u00e1nico durante la recuperaci\\u00f3n. Durante la recuperaci\\u00f3n, si FAULT_BLOCK est\\u00e1 activado, es posible que f2fs_reserve_new_block() devuelva -ENOSPC durante la recuperaci\\u00f3n, lo que puede provocar p\\u00e1nico. Adem\\u00e1s, si la tasa de inyecci\\u00f3n de fallas es 1 y solo el tipo de falla FAULT_BLOCK est\\u00e1 activado, es posible que se produzca un bucle muerto en el bucle de reserva de bloque. Cambiemos como se muestra a continuaci\\u00f3n para solucionar estos problemas: - elimine bug_on() para evitar el p\\u00e1nico. - limitar el n\\u00famero de bucles de reserva de bloques para evitar posibles bucles muertos.\"}]",
      "id": "CVE-2024-27032",
      "lastModified": "2024-11-21T09:03:42.353",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H\", \"baseScore\": 6.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.0, \"impactScore\": 5.2}]}",
      "published": "2024-05-01T13:15:49.230",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T15:14:42.000Z",
      "cve": "CVE-2024-27032",
      "id": "msrc_CVE-2024-27032",
      "initial_release_date": "2024-05-02T07:00:00.000Z",
      "product_status:known_not_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "f2fs: fix to avoid potential panic during recovery",
      "url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-27032.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-27032\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-01T13:15:49.230\",\"lastModified\":\"2026-06-17T07:19:00.523\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: fix to avoid potential panic during recovery\\n\\nDuring recovery, if FAULT_BLOCK is on, it is possible that\\nf2fs_reserve_new_block() will return -ENOSPC during recovery,\\nthen it may trigger panic.\\n\\nAlso, if fault injection rate is 1 and only FAULT_BLOCK fault\\ntype is on, it may encounter deadloop in loop of block reservation.\\n\\nLet\u0027s change as below to fix these issues:\\n- remove bug_on() to avoid panic.\\n- limit the loop count of block reservation to avoid potential\\ndeadloop.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: f2fs: correcci\u00f3n para evitar un posible p\u00e1nico durante la recuperaci\u00f3n. Durante la recuperaci\u00f3n, si FAULT_BLOCK est\u00e1 activado, es posible que f2fs_reserve_new_block() devuelva -ENOSPC durante la recuperaci\u00f3n, lo que puede provocar p\u00e1nico. Adem\u00e1s, si la tasa de inyecci\u00f3n de fallas es 1 y solo el tipo de falla FAULT_BLOCK est\u00e1 activado, es posible que se produzca un bucle muerto en el bucle de reserva de bloque. Cambiemos como se muestra a continuaci\u00f3n para solucionar estos problemas: - elimine bug_on() para evitar el p\u00e1nico. - limitar el n\u00famero de bucles de reserva de bloques para evitar posibles bucles muertos.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/f2fs/f2fs.h\",\"fs/f2fs/recovery.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"b1020a546779139eec5d930e15ce534c1101b89c\",\"lessThan\":\"fe4de493572a4263554903bf9c3afc5c196e15f0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2a7b12d4705bc308cf18eae2b69ec8db34881cc3\",\"lessThan\":\"8844b2f8a3f0c428b74672f9726f9950b1a7764c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c\",\"lessThan\":\"d034810d02a5af8eb74debe29877dcaf5f00fdd1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd\",\"lessThan\":\"f26091a981318b5b7451d61f99bc073a6af8db67\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd\",\"lessThan\":\"21ec68234826b1b54ab980a8df6e33c74cfbee58\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9fceaf8182d453639cddb7f4a6877a1e1564de39\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"80c69f576ff39d6ae8a6e2107da3dc03b533759c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b4fb0807a1d60f8642a5fd62bd659cd6052eaf97\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6.1.77\",\"lessThan\":\"6.1.83\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.6.16\",\"lessThan\":\"6.6.23\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.7.4\",\"lessThan\":\"6.7.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.307\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.269\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.10.210\",\"lessThan\":\"5.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.149\",\"lessThan\":\"5.16\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/f2fs/f2fs.h\",\"fs/f2fs/recovery.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.83\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.23\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7.11\",\"lessThanOrEqual\":\"6.7.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8.2\",\"lessThanOrEqual\":\"6.8.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":6.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-06-06T18:39:19.391888Z\",\"id\":\"CVE-2024-27032\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.307\",\"versionEndExcluding\":\"4.20\",\"matchCriteriaId\":\"3CB2AA1D-5185-48E6-B23F-5143D8FFA151\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4.269\",\"versionEndExcluding\":\"5.5\",\"matchCriteriaId\":\"281DF6F1-190B-460C-A081-C034D898FE00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.210\",\"versionEndExcluding\":\"5.11\",\"matchCriteriaId\":\"DC4651AD-5339-45DA-A5EC-D639C20FEA8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.149\",\"versionEndExcluding\":\"5.16\",\"matchCriteriaId\":\"D9B8AD64-1736-4C16-A29D-8623F482E1A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.77\",\"versionEndExcluding\":\"6.1.83\",\"matchCriteriaId\":\"4086DAEC-DD39-4AEA-A8C1-3A8B0F8088EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.16\",\"versionEndExcluding\":\"6.6.23\",\"matchCriteriaId\":\"12B69ED0-8238-4DE8-8F12-420579AA3756\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7.4\",\"versionEndExcluding\":\"6.7.11\",\"matchCriteriaId\":\"4EE1588F-367A-438D-B89E-0533B3123351\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.8\",\"versionEndExcluding\":\"6.8.2\",\"matchCriteriaId\":\"543A75FF-25B8-4046-A514-1EA8EDD87AB1\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T14:33:07+00:00",
      "cve": "CVE-2024-27032",
      "id": "CVE-2024-27032",
      "initial_release_date": "2024-05-01T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: f2fs: fix to avoid potential panic during recovery",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-27032.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T00:42:31Z",
      "cve": "CVE-2024-27032",
      "id": "CVE-2024-27032",
      "initial_release_date": "2024-05-03T02:09:37Z",
      "product_status:known_not_affected": "385",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-27032",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-27032.json",
      "version": "19"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:21:05.863Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.3, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27032\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-06T18:39:19.391888Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-06T18:39:23.459Z\"}}], \"cna\": {\"title\": \"f2fs: fix to avoid potential panic during recovery\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"b1020a546779139eec5d930e15ce534c1101b89c\", \"lessThan\": \"fe4de493572a4263554903bf9c3afc5c196e15f0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2a7b12d4705bc308cf18eae2b69ec8db34881cc3\", \"lessThan\": \"8844b2f8a3f0c428b74672f9726f9950b1a7764c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c\", \"lessThan\": \"d034810d02a5af8eb74debe29877dcaf5f00fdd1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd\", \"lessThan\": \"f26091a981318b5b7451d61f99bc073a6af8db67\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd\", \"lessThan\": \"21ec68234826b1b54ab980a8df6e33c74cfbee58\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9fceaf8182d453639cddb7f4a6877a1e1564de39\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"80c69f576ff39d6ae8a6e2107da3dc03b533759c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"b4fb0807a1d60f8642a5fd62bd659cd6052eaf97\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6.1.77\", \"lessThan\": \"6.1.83\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.6.16\", \"lessThan\": \"6.6.23\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.7.4\", \"lessThan\": \"6.7.11\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.19.307\", \"lessThan\": \"4.20\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.4.269\", \"lessThan\": \"5.5\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.10.210\", \"lessThan\": \"5.11\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.15.149\", \"lessThan\": \"5.16\", \"versionType\": \"semver\"}], \"programFiles\": [\"fs/f2fs/f2fs.h\", \"fs/f2fs/recovery.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.8\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.8\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.83\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.23\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/f2fs/f2fs.h\", \"fs/f2fs/recovery.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0\"}, {\"url\": \"https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764c\"}, {\"url\": \"https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1\"}, {\"url\": \"https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67\"}, {\"url\": \"https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: fix to avoid potential panic during recovery\\n\\nDuring recovery, if FAULT_BLOCK is on, it is possible that\\nf2fs_reserve_new_block() will return -ENOSPC during recovery,\\nthen it may trigger panic.\\n\\nAlso, if fault injection rate is 1 and only FAULT_BLOCK fault\\ntype is on, it may encounter deadloop in loop of block reservation.\\n\\nLet\u0027s change as below to fix these issues:\\n- remove bug_on() to avoid panic.\\n- limit the loop count of block reservation to avoid potential\\ndeadloop.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.83\", \"versionStartIncluding\": \"6.1.77\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.23\", \"versionStartIncluding\": \"6.6.16\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.11\", \"versionStartIncluding\": \"6.7.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.2\", \"versionStartIncluding\": \"6.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9\", \"versionStartIncluding\": \"6.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.19.307\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.4.269\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.10.210\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.15.149\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:41:29.098Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-27032\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:41:29.098Z\", \"dateReserved\": \"2024-02-19T14:20:24.211Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-01T12:53:32.812Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.