Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-37789

net: openvswitch: fix nested key length validation in the set() action

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < 54c6957d1123a2032099b9eab51c314800f677ceaffected
  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < 7fcaec0b2ab8fa5fbf0b45e5512364a168f445bdaffected
  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < a27526e6b48eee9e2d82efff502c4f272f1a91d4affected
  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < 1489c195c8eecd262aa6712761ba5288203e28ecaffected
  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < 824a7c2df5127b2402b68a21a265d413e78dcad7affected
  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < be80768d4f3b6fd13f421451cc3fee8778aba8bcaffected
  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < 03d7262dd53e8c404da35cc81aaa887fd901f76baffected
  • ccb1352e76cff0524e7ccb2074826a092dd13016 to < 65d91192aa66f05710cfddf6a14b5a25ee554dbaaffected

Linux Linux

Default version status: affected

  • 3.3affected
  • 0 to < 3.3unaffected
  • 5.4.293 to ≤ 5.4.*unaffected
  • 5.10.237 to ≤ 5.10.*unaffected
  • 5.15.181 to ≤ 5.15.*unaffected
  • 6.1.135 to ≤ 6.1.*unaffected
  • 6.6.88 to ≤ 6.6.*unaffected
  • 6.12.25 to ≤ 6.12.*unaffected
  • 6.14.4 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References