5.5

CVE-2024-27015

netfilter: flowtable: incorrect pppoe tuple

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: incorrect pppoe tuple

pppoe traffic reaching ingress path does not match the flowtable entry
because the pppoe header is expected to be at the network header offset.
This bug causes a mismatch in the flow table lookup, so pppoe packets
enter the classical forwarding path.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.13 < 5.15.157
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.88
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.29
Linux ≫ Linux Kernel Version >= 6.7 < 6.8.8
Linux ≫ Linux Kernel Version 6.9 Update rc1
Linux ≫ Linux Kernel Version 6.9 Update rc2
Linux ≫ Linux Kernel Version 6.9 Update rc3
Linux ≫ Linux Kernel Version 6.9 Update rc4
Fedoraproject ≫ Fedora Version 38
Fedoraproject ≫ Fedora Version 39
Fedoraproject ≫ Fedora Version 40
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.133
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/4ed82dd368ad883dc4284292937b882f044e625d
Patch
https://git.kernel.org/stable/c/6db5dc7b351b9569940cd1cf445e237c42cd6d27
Patch
https://git.kernel.org/stable/c/e3f078103421642fcd5f05c5e70777feb10f000d
Patch
https://git.kernel.org/stable/c/e719b52d0c56989b0f3475a03a6d64f182c85b56
Patch
https://git.kernel.org/stable/c/f1c3c61701a0b12f4906152c1626a5de580ea3d2
Patch
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/