cve-2024-27432
Vulnerability from cvelistv5
Published
2024-05-17 12:08
Modified
2024-12-19 08:54
Severity ?
EPSS score ?
0.27% (0.47707)
Summary
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix PPE hanging issue A patch to resolve an issue was found in MediaTek's GPL-licensed SDK: In the mtk_ppe_stop() function, the PPE scan mode is not disabled before disabling the PPE. This can potentially lead to a hang during the process of disabling the PPE. Without this patch, the PPE may experience a hang during the reboot test.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27
Impacted products
Vendor Product Version
Linux Linux Version: ba37b7caf1ed2395cc84d8f823ff933975f1f789
Version: ba37b7caf1ed2395cc84d8f823ff933975f1f789
Version: ba37b7caf1ed2395cc84d8f823ff933975f1f789
Version: ba37b7caf1ed2395cc84d8f823ff933975f1f789
Version: ba37b7caf1ed2395cc84d8f823ff933975f1f789
Version: ba37b7caf1ed2395cc84d8f823ff933975f1f789
 Create a notification for this product.
   Linux Linux Version: 5.13
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-27432",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-12T15:20:14.109035Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-12T15:20:26.121Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T00:34:52.288Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "drivers/net/ethernet/mediatek/mtk_ppe.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "9fcadd125044007351905d40c405fadc2d3bb6d6",
                     status: "affected",
                     version: "ba37b7caf1ed2395cc84d8f823ff933975f1f789",
                     versionType: "git",
                  },
                  {
                     lessThan: "f78807362828ad01db2a9ed005bf79501b620f27",
                     status: "affected",
                     version: "ba37b7caf1ed2395cc84d8f823ff933975f1f789",
                     versionType: "git",
                  },
                  {
                     lessThan: "943c14ece95eb1cf98d477462aebcbfdfd714633",
                     status: "affected",
                     version: "ba37b7caf1ed2395cc84d8f823ff933975f1f789",
                     versionType: "git",
                  },
                  {
                     lessThan: "49202a8256fc50517ef06fd5e2084c4febde6369",
                     status: "affected",
                     version: "ba37b7caf1ed2395cc84d8f823ff933975f1f789",
                     versionType: "git",
                  },
                  {
                     lessThan: "09a1907433865b7c8ee6777e507f5126bdd38c0f",
                     status: "affected",
                     version: "ba37b7caf1ed2395cc84d8f823ff933975f1f789",
                     versionType: "git",
                  },
                  {
                     lessThan: "ea80e3ed09ab2c2b75724faf5484721753e92c31",
                     status: "affected",
                     version: "ba37b7caf1ed2395cc84d8f823ff933975f1f789",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "drivers/net/ethernet/mediatek/mtk_ppe.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "5.13",
                  },
                  {
                     lessThan: "5.13",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "5.15.*",
                     status: "unaffected",
                     version: "5.15.153",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.1.*",
                     status: "unaffected",
                     version: "6.1.83",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.6.*",
                     status: "unaffected",
                     version: "6.6.23",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.7.*",
                     status: "unaffected",
                     version: "6.7.11",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.8.*",
                     status: "unaffected",
                     version: "6.8.2",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.9",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: fix PPE hanging issue\n\nA patch to resolve an issue was found in MediaTek's GPL-licensed SDK:\nIn the mtk_ppe_stop() function, the PPE scan mode is not disabled before\ndisabling the PPE. This can potentially lead to a hang during the process\nof disabling the PPE.\n\nWithout this patch, the PPE may experience a hang during the reboot test.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T08:54:48.765Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6",
            },
            {
               url: "https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27",
            },
            {
               url: "https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633",
            },
            {
               url: "https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369",
            },
            {
               url: "https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f",
            },
            {
               url: "https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31",
            },
         ],
         title: "net: ethernet: mtk_eth_soc: fix PPE hanging issue",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-27432",
      datePublished: "2024-05-17T12:08:43.564Z",
      dateReserved: "2024-02-25T13:47:42.687Z",
      dateUpdated: "2024-12-19T08:54:48.765Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-27432\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-17T13:15:57.847\",\"lastModified\":\"2024-11-21T09:04:35.727\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: ethernet: mtk_eth_soc: fix PPE hanging issue\\n\\nA patch to resolve an issue was found in MediaTek's GPL-licensed SDK:\\nIn the mtk_ppe_stop() function, the PPE scan mode is not disabled before\\ndisabling the PPE. This can potentially lead to a hang during the process\\nof disabling the PPE.\\n\\nWithout this patch, the PPE may experience a hang during the reboot test.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ethernet: mtk_eth_soc: soluciona el problema de bloqueo del PPE Se encontró un parche para resolver un problema en el SDK con licencia GPL de MediaTek: En la función mtk_ppe_stop(), el modo de escaneo del PPE no está desactivado antes de desactivar el EPI. Potencialmente, esto puede provocar un bloqueo durante el proceso de desactivación del EPI. Sin este parche, el PPE puede sufrir un bloqueo durante la prueba de reinicio.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T00:34:52.288Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-27432\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-12T15:20:14.109035Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-12T15:20:21.403Z\"}}], \"cna\": {\"title\": \"net: ethernet: mtk_eth_soc: fix PPE hanging issue\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"ba37b7caf1ed2395cc84d8f823ff933975f1f789\", \"lessThan\": \"9fcadd125044007351905d40c405fadc2d3bb6d6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ba37b7caf1ed2395cc84d8f823ff933975f1f789\", \"lessThan\": \"f78807362828ad01db2a9ed005bf79501b620f27\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ba37b7caf1ed2395cc84d8f823ff933975f1f789\", \"lessThan\": \"943c14ece95eb1cf98d477462aebcbfdfd714633\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ba37b7caf1ed2395cc84d8f823ff933975f1f789\", \"lessThan\": \"49202a8256fc50517ef06fd5e2084c4febde6369\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ba37b7caf1ed2395cc84d8f823ff933975f1f789\", \"lessThan\": \"09a1907433865b7c8ee6777e507f5126bdd38c0f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ba37b7caf1ed2395cc84d8f823ff933975f1f789\", \"lessThan\": \"ea80e3ed09ab2c2b75724faf5484721753e92c31\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/net/ethernet/mediatek/mtk_ppe.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.13\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.13\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.15.153\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.83\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.23\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.11\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/net/ethernet/mediatek/mtk_ppe.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6\"}, {\"url\": \"https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27\"}, {\"url\": \"https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633\"}, {\"url\": \"https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369\"}, {\"url\": \"https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f\"}, {\"url\": \"https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: ethernet: mtk_eth_soc: fix PPE hanging issue\\n\\nA patch to resolve an issue was found in MediaTek's GPL-licensed SDK:\\nIn the mtk_ppe_stop() function, the PPE scan mode is not disabled before\\ndisabling the PPE. This can potentially lead to a hang during the process\\nof disabling the PPE.\\n\\nWithout this patch, the PPE may experience a hang during the reboot test.\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T08:54:48.765Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-27432\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T08:54:48.765Z\", \"dateReserved\": \"2024-02-25T13:47:42.687Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-17T12:08:43.564Z\", \"assignerShortName\": \"Linux\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.