CVE-2024-27032f2fs: fix to avoid potential panic during recovery
Updated under an hour ago ()
Does this affect you?
It affects Linux and 4 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.
- CVSS
- 6.3 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from b1020a546779139eec5d930e15ce534c1101b89c before fe4de493572a4263554903bf9c3afc5c196e15f0; from 2a7b12d4705bc308cf18eae2b69ec8db34881cc3 before 8844b2f8a3f0c428b74672f9726f9950b1a7764c; from b29cc6e29b5e6037e1bcd2b2ac67b7d89acd194c before d034810d02a5af8eb74debe29877dcaf5f00fdd1; from 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd before f26091a981318b5b7451d61f99bc073a6af8db67; 956fa1ddc132e028f3b7d4cf17e6bfc8cb36c7fd builds before 21ec68234826b1b54ab980a8df6e33c74cfbee58; bc1fb291f36dd1d9d667241d9fe30b835dbb8ee8; 9fceaf8182d453639cddb7f4a6877a1e1564de39; 80c69f576ff39d6ae8a6e2107da3dc03b533759c; and 8 more ranges | CNA record |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 4.19.307 before 4.20; from 5.4.269 before 5.5; from 5.10.210 before 5.11; from 5.15.149 before 5.16; from 6.1.77 before 6.1.83; from 6.6.16 before 6.6.23; from 6.7.4 before 6.7.11; from 6.8 before 6.8.2 | NVD |
References
- https://git.kernel.org/stable/c/fe4de493572a4263554903bf9c3afc5c196e15f0patch
- https://git.kernel.org/stable/c/8844b2f8a3f0c428b74672f9726f9950b1a7764cpatch
- https://git.kernel.org/stable/c/d034810d02a5af8eb74debe29877dcaf5f00fdd1patch
- https://git.kernel.org/stable/c/f26091a981318b5b7451d61f99bc073a6af8db67patch
- https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58patch
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.