VYPR
Unrated severityNVD Advisory· Published May 1, 2025· Updated Nov 3, 2025

net: openvswitch: fix nested key length validation in the set() action

CVE-2025-37789

Description

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: fix nested key length validation in the set() action

It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first.

Affected products

289

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.