CVE-2024-27432

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix PPE hanging issue A patch to resolve an issue was found in MediaTek's GPL-licensed SDK: In the mtk_ppe_stop() function, the PPE scan mode is not disabled before disabling the PPE. This can potentially lead to a hang during the process of disabling the PPE. Without this patch, the PPE may experience a hang during the reboot test.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f	Patch
https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369	Patch
https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633	Patch
https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6	Patch
https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31	Patch
https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27	Patch
https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f	Patch
https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369	Patch
https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633	Patch
https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6	Patch
https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31	Patch
https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

No history.

Information

Published : 2024-05-17 13:15

Updated : 2026-06-17 07:19

NVD link : CVE-2024-27432

Mitre link : CVE-2024-27432

CVE.ORG link : CVE-2024-27432

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2024-27432", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-27432", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-12T15:20:14.109035Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ba37b7caf1ed2395cc84d8f823ff933975f1f789", "lessThan": "9fcadd125044007351905d40c405fadc2d3bb6d6", "versionType": "git"}, {"status": "affected", "version": "ba37b7caf1ed2395cc84d8f823ff933975f1f789", "lessThan": "f78807362828ad01db2a9ed005bf79501b620f27", "versionType": "git"}, {"status": "affected", "version": "ba37b7caf1ed2395cc84d8f823ff933975f1f789", "lessThan": "943c14ece95eb1cf98d477462aebcbfdfd714633", "versionType": "git"}, {"status": "affected", "version": "ba37b7caf1ed2395cc84d8f823ff933975f1f789", "lessThan": "49202a8256fc50517ef06fd5e2084c4febde6369", "versionType": "git"}, {"status": "affected", "version": "ba37b7caf1ed2395cc84d8f823ff933975f1f789", "lessThan": "09a1907433865b7c8ee6777e507f5126bdd38c0f", "versionType": "git"}, {"status": "affected", "version": "ba37b7caf1ed2395cc84d8f823ff933975f1f789", "lessThan": "ea80e3ed09ab2c2b75724faf5484721753e92c31", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/mediatek/mtk_ppe.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.13"}, {"status": "unaffected", "version": "0", "lessThan": "5.13", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.153", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.83", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.23", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.11", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8.2", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/mediatek/mtk_ppe.c"], "defaultStatus": "affected"}]}], "published": "2024-05-17T13:15:57.847", "references": [{"url": "https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: fix PPE hanging issue\n\nA patch to resolve an issue was found in MediaTek's GPL-licensed SDK:\nIn the mtk_ppe_stop() function, the PPE scan mode is not disabled before\ndisabling the PPE. This can potentially lead to a hang during the process\nof disabling the PPE.\n\nWithout this patch, the PPE may experience a hang during the reboot test."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ethernet: mtk_eth_soc: soluciona el problema de bloqueo del PPE Se encontr\u00f3 un parche para resolver un problema en el SDK con licencia GPL de MediaTek: En la funci\u00f3n mtk_ppe_stop(), el modo de escaneo del PPE no est\u00e1 desactivado antes de desactivar el EPI. Potencialmente, esto puede provocar un bloqueo durante el proceso de desactivaci\u00f3n del EPI. Sin este parche, el PPE puede sufrir un bloqueo durante la prueba de reinicio."}], "lastModified": "2026-06-17T07:19:53.080", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7850BE17-94DE-4DDA-856C-B8DEE1C34FD8", "versionEndExcluding": "5.15.153", "versionStartIncluding": "5.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "121A07F6-F505-4C47-86BF-9BB6CC7B6C19", "versionEndExcluding": "6.1.83", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E00814DC-0BA7-431A-9926-80FEB4A96C68", "versionEndExcluding": "6.6.23", "versionStartIncluding": "6.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD", "versionEndExcluding": "6.7.11", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1", "versionEndExcluding": "6.8.2", "versionStartIncluding": "6.8"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}