CVE-2024-27015

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: incorrect pppoe tuple

pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 72efd585f7144a047f7da63864284764596ccad9, < e719b52d0c56989b0f3475a03a6d64f182c85b56; >= 72efd585f7144a047f7da63864284764596ccad9, < f1c3c61701a0b12f4906152c1626a5de580ea3d2; >= 72efd585f7144a047f7da63864284764596ccad9, < 4ed82dd368ad883dc4284292937b882f044e625d; >= 72efd585f7144a047f7da63864284764596ccad9, < e3f078103421642fcd5f05c5e70777feb10f000d; >= 72efd585f7144a047f7da63864284764596ccad9, < 6db5dc7b351b9569940cd1cf445e237c42cd6d27
LinuxLinux5.13

References

Timeline

Published
May 1, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-270165.5In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficientCVE-2024-270175.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The CVE-2024-270187.8In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: skip conntrack input hook for promisc packets CVE-2024-270194.7In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() CVE-2024-27029.8Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSCVE-2024-270207.0In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() CVE-2024-270217.8In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devm_led_claCVE-2024-270227.8In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald rCVE-2024-270235.5In the Linux kernel, the following vulnerability has been resolved: md: Fix missing release of 'active_io' for flush submit_flushes atomiCVE-2024-270247.8In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't eCVE-2024-270255.5In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and returCVE-2024-270265.5In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix missing reserved tailroom Use rbi->len instead of rcd->le
CVE-2024-27015: Medium severity, CVSS 5.5 | Vulnix