Vulnerability identifier: #VU93774

Vulnerability risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-27432

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the mtk_ppe_start() and mtk_ppe_stop() functions in drivers/net/ethernet/mediatek/mtk_ppe.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6
http://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27
http://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633
http://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369
http://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f
http://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.