CVE-2024-27015

netfilter: flowtable: incorrect pppoe tuple

MEDIUM

5.5

CVSS Score

Published: May 1, 2024 at 05:29 AM UTC

Updated: June 17, 2026 at 07:18 AM UTC

2 products affected across 2 vendorsLinux KernelFedora

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fedora · Fedora Projectrpm

95%

38 39 40

Linux Kernel · Linux

95%

5.13 ≤ v < 5.15.1575.13 ≤ v < 6.1.885.13 ≤ v < 6.6.295.13 ≤ v < 6.8.85.13 ≤ v < 6.95.16 ≤ v < 6.1.886.2 ≤ v < 6.6.296.7 ≤ v < 6.8.86.9 rc1 6.9 rc2 6.9 rc3 6.9 rc472efd585f7144a047f7da63864284764596ccad9

Vendor states this is fixed in 4ed82dd368ad883dc4284292937b882f044e625d (fixed)

Vendor states this is fixed in 6db5dc7b351b9569940cd1cf445e237c42cd6d27 (fixed)

Vendor states this is fixed in e3f078103421642fcd5f05c5e70777feb10f000d (fixed)

Vendor states this is fixed in e719b52d0c56989b0f3475a03a6d64f182c85b56 (fixed)

Vendor states this is fixed in f1c3c61701a0b12f4906152c1626a5de580ea3d2 (fixed)

Vendor states this is fixed in 5.13 (unaffected)

Vendor states this is fixed in 5.15.157 (unaffected)

Vendor states this is fixed in 6.1.88 (unaffected)

Vendor states this is fixed in 6.6.29 (unaffected)

Vendor states this is fixed in 6.8.8 (unaffected)

Vendor states this is fixed in 6.9 (unaffected)