CVE-2024-27016

netfilter: flowtable: validate pppoe header

State: Published
Severity: 7.1 High
Published: May 1, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: validate pppoe header

Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access protocol field.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	72efd585f7144a047f7da63864284764596ccad9 to before d06977b9a4109f8738bb276125eb6a0b772bc433Affected 72efd585f7144a047f7da63864284764596ccad9 to before 8bf7c76a2a207ca2b4cfda0a279192adf27678d7Affected 72efd585f7144a047f7da63864284764596ccad9 to before a2471d271042ea18e8a6babc132a8716bb2f08b9Affected 72efd585f7144a047f7da63864284764596ccad9 to before cf366ee3bc1b7d1c76a882640ba3b3f8f1039163Affected 72efd585f7144a047f7da63864284764596ccad9 to before 87b3593bed1868b2d9fe096c01bcdf0ea86cbebfAffected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.157 through 5.15.Not affected 6.1.88 through 6.1.Not affected 6.6.29 through 6.6.Not affected 6.8.8 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

72efd585f7144a047f7da63864284764596ccad9 to before d06977b9a4109f8738bb276125eb6a0b772bc433Affected
72efd585f7144a047f7da63864284764596ccad9 to before 8bf7c76a2a207ca2b4cfda0a279192adf27678d7Affected
72efd585f7144a047f7da63864284764596ccad9 to before a2471d271042ea18e8a6babc132a8716bb2f08b9Affected
72efd585f7144a047f7da63864284764596ccad9 to before cf366ee3bc1b7d1c76a882640ba3b3f8f1039163Affected
72efd585f7144a047f7da63864284764596ccad9 to before 87b3593bed1868b2d9fe096c01bcdf0ea86cbebfAffected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.157 through 5.15.*Not affected
6.1.88 through 6.1.*Not affected
6.6.29 through 6.6.*Not affected
6.8.8 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.