CVE-2024-27432

net: ethernet: mtk_eth_soc: fix PPE hanging issue

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix PPE hanging issue A patch to resolve an issue was found in MediaTek's GPL-licensed SDK: In the mtk_ppe_stop() function, the PPE scan mode is not disabled before disabling the PPE. This can potentially lead to a hang during the process of disabling the PPE. Without this patch, the PPE may experience a hang during the reboot test.

N/A

CVSS

Severity:

EPSS 0.20%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/9fcadd125044007351905d40c405fadc2d3bb6d6
https://git.kernel.org/stable/c/f78807362828ad01db2a9ed005bf79501b620f27
https://git.kernel.org/stable/c/943c14ece95eb1cf98d477462aebcbfdfd714633
https://git.kernel.org/stable/c/49202a8256fc50517ef06fd5e2084c4febde6369
https://git.kernel.org/stable/c/09a1907433865b7c8ee6777e507f5126bdd38c0f
https://git.kernel.org/stable/c/ea80e3ed09ab2c2b75724faf5484721753e92c31

Frequently Asked Questions

What is the severity of CVE-2024-27432?: CVE-2024-27432 has not yet been assigned a CVSS score.
How to fix CVE-2024-27432?: To fix CVE-2024-27432, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-27432 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-27432 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-27432?: CVE-2024-27432 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.