CVE-2024-27033 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic verify_blkaddr() will trigger panic once we inject fault into f2fs_is_valid_blkaddr(), fix to remove this unnecessary f2fs_bug_on().

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Linux	Linux Kernel

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db
https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49
https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec
https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb
https://lore.kernel.org/linux-cve-announce/2024050111-CVE-2024-27033-d152@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-27033
https://www.cve.org/CVERecord?id=CVE-2024-27033

History

Mon, 23 Dec 2024 19:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel

Thu, 19 Dec 2024 09:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-01T12:53:36.254Z

Updated: 2024-12-19T08:53:00.899Z

Reserved: 2024-02-19T14:20:24.211Z

Link: CVE-2024-27033

Vulnrichment

Updated: 2024-08-02T00:21:05.922Z

NVD

Status : Analyzed

Published: 2024-05-01T13:15:49.273

Modified: 2024-12-23T19:12:40.210

Link: CVE-2024-27033

Redhat

Severity : Moderate

Publid Date: 2024-05-01T00:00:00Z

Links: CVE-2024-27033 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-27033", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.211Z", "datePublished": "2024-05-01T12:53:36.254Z", "dateUpdated": "2024-12-19T08:53:00.899Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:53:00.899Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic\n\nverify_blkaddr() will trigger panic once we inject fault into\nf2fs_is_valid_blkaddr(), fix to remove this unnecessary f2fs_bug_on()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/f2fs/f2fs.h"], "versions": [{"version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "0386408036bfc8b50296d9e544ff91c4d52af2db", "status": "affected", "versionType": "git"}, {"version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "6633cdc8b2ebefcddcfcdacfd063105e60f39a49", "status": "affected", "versionType": "git"}, {"version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "abe98a05e7162f64759bf9111108ebcb11322dec", "status": "affected", "versionType": "git"}, {"version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "b896e302f79678451a94769ddd9e52e954c64fbb", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/f2fs/f2fs.h"], "versions": [{"version": "6.2", "status": "affected"}, {"version": "0", "lessThan": "6.2", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.23", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.11", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8.2", "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db"}, {"url": "https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49"}, {"url": "https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec"}, {"url": "https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb"}], "title": "f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-17T17:40:17.771817Z", "id": "CVE-2024-27033", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:45:41.346Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:21:05.922Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:21:05.922Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27033", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-17T17:40:17.771817Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:40:18.753Z"}}], "cna": {"title": "f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "0386408036bfc8b50296d9e544ff91c4d52af2db", "versionType": "git"}, {"status": "affected", "version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "6633cdc8b2ebefcddcfcdacfd063105e60f39a49", "versionType": "git"}, {"status": "affected", "version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "abe98a05e7162f64759bf9111108ebcb11322dec", "versionType": "git"}, {"status": "affected", "version": "18792e64c86dd7e34ba28e4f61faba472b7bf5fc", "lessThan": "b896e302f79678451a94769ddd9e52e954c64fbb", "versionType": "git"}], "programFiles": ["fs/f2fs/f2fs.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.2"}, {"status": "unaffected", "version": "0", "lessThan": "6.2", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.23", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.11", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8.2", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/f2fs/f2fs.h"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db"}, {"url": "https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49"}, {"url": "https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec"}, {"url": "https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic\n\nverify_blkaddr() will trigger panic once we inject fault into\nf2fs_is_valid_blkaddr(), fix to remove this unnecessary f2fs_bug_on()."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:53:00.899Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27033", "state": "PUBLISHED", "dateUpdated": "2024-12-19T08:53:00.899Z", "dateReserved": "2024-02-19T14:20:24.211Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-01T12:53:36.254Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E00814DC-0BA7-431A-9926-80FEB4A96C68", "versionEndExcluding": "6.6.23", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD", "versionEndExcluding": "6.7.11", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1", "versionEndExcluding": "6.8.2", "versionStartIncluding": "6.8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic\n\nverify_blkaddr() will trigger panic once we inject fault into\nf2fs_is_valid_blkaddr(), fix to remove this unnecessary f2fs_bug_on()."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: f2fs: soluci\u00f3n para eliminar f2fs_bug_on() innecesario para evitar el p\u00e1nico. verificar_blkaddr() provocar\u00e1 p\u00e1nico una vez que inyectemos el error en f2fs_is_valid_blkaddr(), soluci\u00f3n para eliminar este f2fs_bug_on() innecesario."}], "id": "CVE-2024-27033", "lastModified": "2024-12-23T19:12:40.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-05-01T13:15:49.273", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0386408036bfc8b50296d9e544ff91c4d52af2db"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6633cdc8b2ebefcddcfcdacfd063105e60f39a49"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/abe98a05e7162f64759bf9111108ebcb11322dec"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b896e302f79678451a94769ddd9e52e954c64fbb"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}