CVE-2024-27015

netfilter: flowtable: incorrect pppoe tuple

State: Published
Severity: Not scored
Published: May 1, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: incorrect pppoe tuple

pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	72efd585f7144a047f7da63864284764596ccad9 to before e719b52d0c56989b0f3475a03a6d64f182c85b56Affected 72efd585f7144a047f7da63864284764596ccad9 to before f1c3c61701a0b12f4906152c1626a5de580ea3d2Affected 72efd585f7144a047f7da63864284764596ccad9 to before 4ed82dd368ad883dc4284292937b882f044e625dAffected 72efd585f7144a047f7da63864284764596ccad9 to before e3f078103421642fcd5f05c5e70777feb10f000dAffected 72efd585f7144a047f7da63864284764596ccad9 to before 6db5dc7b351b9569940cd1cf445e237c42cd6d27Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.157 through 5.15.Not affected 6.1.88 through 6.1.Not affected 6.6.29 through 6.6.Not affected 6.8.8 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

72efd585f7144a047f7da63864284764596ccad9 to before e719b52d0c56989b0f3475a03a6d64f182c85b56Affected
72efd585f7144a047f7da63864284764596ccad9 to before f1c3c61701a0b12f4906152c1626a5de580ea3d2Affected
72efd585f7144a047f7da63864284764596ccad9 to before 4ed82dd368ad883dc4284292937b882f044e625dAffected
72efd585f7144a047f7da63864284764596ccad9 to before e3f078103421642fcd5f05c5e70777feb10f000dAffected
72efd585f7144a047f7da63864284764596ccad9 to before 6db5dc7b351b9569940cd1cf445e237c42cd6d27Affected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.157 through 5.15.*Not affected
6.1.88 through 6.1.*Not affected
6.6.29 through 6.6.*Not affected
6.8.8 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.