PT-2024-21622 · Linux+4 · Linux Kernel+4

Zhiguo Niu · Published 2024-02-05 · Updated 2026-05-26 · CVE-2024-27032

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the f2fs file system in the Linux kernel. During recovery, if FAULT BLOCK is on, it is possible that f2fs reserve new block() will return -ENOSPC, which may trigger a panic. Additionally, if the fault injection rate is 1 and only FAULT BLOCK fault type is on, it may encounter a deadloop in the block reservation loop. The problem can be fixed by removing bug on() to avoid panic and limiting the loop count of block reservation to avoid potential deadloop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Infinite Loop

Weakness Enumeration

CWE-476

CWE-835

Related Identifiers

BDU:2025-04402

CVE-2024-27032

OESA-2024-1768

OESA-2024-1942

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 335

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27032.json · Exploit
• https://git.kernel.org/stable/c/21ec68234826b1b54ab980a8df6e33c74cfbee58 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2024-27032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35798 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27012 · Security Note
• https://ubuntu.com/security/CVE-2024-27073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26969 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26883 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35830 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27032 · Security Note
• https://ubuntu.com/security/CVE-2024-35829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40960 · Security Note
• https://ubuntu.com/security/CVE-2023-47233 · Vendor Advisory