CVE-2024-27033

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27033
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic verify_blkaddr() will trigger panic once we inject fault into f2fs_is_valid_blkaddr(), fix to remove this unnecessary f2fs_bug_on().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db Patch
https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49 Patch
https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec Patch
https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb Patch
https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db Patch
https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49 Patch
https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec Patch
https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Dec 2024, 19:12

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db - () https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db - Patch
References () https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49 - () https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49 - Patch
References () https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec - () https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec - Patch
References () https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb - () https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: f2fs: solución para eliminar f2fs_bug_on() innecesario para evitar el pánico. verificar_blkaddr() provocará pánico una vez que inyectemos el error en f2fs_is_valid_blkaddr(), solución para eliminar este f2fs_bug_on() innecesario.
References () https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db - () https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db -
References () https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49 - () https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49 -
References () https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec - () https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec -
References () https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb - () https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb -

01 May 2024, 19:50

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2024-12-23 19:12

NVD link : CVE-2024-27033

Mitre link : CVE-2024-27033

CVE.ORG link : CVE-2024-27033

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo