CVE-2024-27016

netfilter: flowtable: validate pppoe header

MEDIUM

5.5

CVSS Score

Published: May 1, 2024 at 05:29 AM UTC

Updated: August 5, 2026 at 12:04 PM UTC

2 products affected across 2 vendorsLinux KernelFedora

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access protocol field.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fedora · Fedora Projectrpm

95%

38 39 40

Linux Kernel · Linux

95%

5.13 ≤ v < 5.15.1575.13 ≤ v < 6.1.885.13 ≤ v < 6.6.295.13 ≤ v < 6.8.85.13 ≤ v < 6.95.16 ≤ v < 6.1.886.2 ≤ v < 6.6.296.7 ≤ v < 6.8.86.9 rc1 6.9 rc2 6.9 rc3 6.9 rc472efd585f7144a047f7da63864284764596ccad9

Vendor states this is fixed in 87b3593bed1868b2d9fe096c01bcdf0ea86cbebf (fixed)

Vendor states this is fixed in 8bf7c76a2a207ca2b4cfda0a279192adf27678d7 (fixed)

Vendor states this is fixed in a2471d271042ea18e8a6babc132a8716bb2f08b9 (fixed)

Vendor states this is fixed in cf366ee3bc1b7d1c76a882640ba3b3f8f1039163 (fixed)

Vendor states this is fixed in d06977b9a4109f8738bb276125eb6a0b772bc433 (fixed)

Vendor states this is fixed in 5.13 (unaffected)

Vendor states this is fixed in 5.15.157 (unaffected)

Vendor states this is fixed in 6.1.88 (unaffected)

Vendor states this is fixed in 6.6.29 (unaffected)

Vendor states this is fixed in 6.8.8 (unaffected)

Vendor states this is fixed in 6.9 (unaffected)