CVE-2024-27016 netfilter: flowtable: validate pppoe header

2024-05-0105:29:57

Linux

raw.githubusercontent.com

linux

kernel

netfilter

flowtable

pppoe

header

protocol

vulnerability

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

JSON

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: validate pppoe header

Ensure there is sufficient room to access the protocol field of the
PPPoe header. Validate it once before the flowtable lookup, then use a
helper function to access protocol field.