CVE-2024-27016

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: validate pppoe header

Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access protocol field.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 72efd585f7144a047f7da63864284764596ccad9, < d06977b9a4109f8738bb276125eb6a0b772bc433; >= 72efd585f7144a047f7da63864284764596ccad9, < 8bf7c76a2a207ca2b4cfda0a279192adf27678d7; >= 72efd585f7144a047f7da63864284764596ccad9, < a2471d271042ea18e8a6babc132a8716bb2f08b9; >= 72efd585f7144a047f7da63864284764596ccad9, < cf366ee3bc1b7d1c76a882640ba3b3f8f1039163; >= 72efd585f7144a047f7da63864284764596ccad9, < 87b3593bed1868b2d9fe096c01bcdf0ea86cbebf
LinuxLinux5.13

References

Timeline

Published
May 1, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-270175.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The CVE-2024-270187.8In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: skip conntrack input hook for promisc packets CVE-2024-270194.7In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() CVE-2024-27029.8Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSCVE-2024-270207.0In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() CVE-2024-270217.8In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devm_led_claCVE-2024-270227.8In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald rCVE-2024-270235.5In the Linux kernel, the following vulnerability has been resolved: md: Fix missing release of 'active_io' for flush submit_flushes atomiCVE-2024-270247.8In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't eCVE-2024-270255.5In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and returCVE-2024-270265.5In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix missing reserved tailroom Use rbi->len instead of rcd->leCVE-2024-270275.5In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpll_xa_ref_*_del() for multiple registrations Currently, if