CVE-2024-27432: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27432 affects the MediaTek SoC Gigabit Ethernet driver in the Linux kernel. The vulnerability was discovered in May 2024 and involves a race condition in the mtk_ppe_stop() function where the PPE scan mode is not disabled before disabling the PPE. This issue affects the net/ethernet/mtk_eth_soc component (Kernel Commit).

The vulnerability stems from a race condition in the PPE (Packet Processing Engine) shutdown sequence. Specifically, in the mtk_ppe_stop() function, the PPE scan mode is not properly disabled before the PPE itself is disabled. The fix involves modifying the shutdown sequence to first disable the scan mode along with other aging configurations before disabling the PPE offload engine (NVD).

When exploited, this vulnerability can lead to a denial of service condition, specifically causing the device to become unavailable. The issue manifests particularly during system reboot tests, where the PPE may experience a hang during the shutdown process (Ubuntu Security).

The vulnerability requires local access to exploit. A local attacker could potentially trigger this vulnerability to cause a denial of service by affecting the device availability (USN-6817-1).

The issue has been fixed in various Linux kernel versions. Ubuntu has released patches for affected versions: Ubuntu 24.04 LTS (noble) with linux 6.8.0-35.35, Ubuntu 22.04 LTS (jammy) with linux 5.15.0-112.122. Users should update their systems to the patched versions (Ubuntu Security).