CVE-2024-27016

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: validate pppoe header

Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access protocol field.

This vulnerability is rated as Moderate severity because exploitation requires non-default network configurations and primarily results in a denial of service by triggering a kernel crash. The issue only affects environments where the nftables flowtable acceleration mechanism is explicitly configured to process Point-to-Point Protocol over Ethernet (PPPoE) network traffic. Because flowtable offloading is disabled by default on Red Hat Enterprise Linux and requires specific gateway or router roles handling PPPoE encapsulations, standard deployments are not exposed in typical configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.