CVE-2024-27032: f2fs: fix to avoid potential panic during recovery
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to avoid potential panic during recovery
During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock() will return -ENOSPC during recovery, then it may trigger panic.
Also, if fault injection rate is 1 and only FAULTBLOCK fault type is on, it may encounter deadloop in loop of block reservation.
Let's change as below to fix these issues: - remove bugon() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27032?
The severity of CVE-2024-27032 is high due to the potential for system panic during recovery.
How do I fix CVE-2024-27032?
To fix CVE-2024-27032, upgrade to the patched versions of the Linux kernel specified in the advisory.
Which versions of Linux are affected by CVE-2024-27032?
CVE-2024-27032 affects Linux kernel versions from 5.10.223-1 up to 5.10.226-1.
What does CVE-2024-27032 affect during recovery?
CVE-2024-27032 affects the f2fs file system leading to a potential panic if FAULT_BLOCK is encountered during recovery.
Is an upgrade mandatory for CVE-2024-27032?
Yes, an upgrade is mandatory to eliminate the risk posed by CVE-2024-27032.