← CVE Intelligence

CVE-2024-27015

netfilter: flowtable: incorrect pppoe tuple PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 72efd585f7144a047f7da63864284764596ccad9 before e719b52d0c56989b0f3475a03a6d64f182c85b56; affected 72efd585f7144a047f7da63864284764596ccad9 before f1c3c61701a0b12f4906152c1626a5de580ea3d2; affected 72efd585f7144a047f7da63864284764596ccad9 before 4ed82dd368ad883dc4284292937b882f044e625d; affected 72efd585f7144a047f7da63864284764596ccad9 before e3f078103421642fcd5f05c5e70777feb10f000d; affected 72efd585f7144a047f7da63864284764596ccad9 before 6db5dc7b351b9569940cd1cf445e237c42cd6d27
Linux / Linuxaffected 5.13; unaffected 0 before 5.13; unaffected 5.15.157 through 5.15.*; unaffected 6.1.88 through 6.1.*; unaffected 6.6.29 through 6.6.*; unaffected 6.8.8 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.