In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to grow beyond 64 KiB, which is valid, but also removed the last guard preventing a generated nested action attribute from exceeding U16_MAX. An oversized generated co…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1b41cbe05b184f8861712f0806cc0c4f5d8c6dfe
- https://git.kernel.org/stable/c/3f1f755366687d051174739fb99f7d560202f60b
- https://git.kernel.org/stable/c/ab855641241387db062a5e41d9ad6b8561542572
- https://git.kernel.org/stable/c/c66bd2626c2764f23764ff0f8277f44a9cfe8349
- https://git.kernel.org/stable/c/d573250d228401f707f4dbc09d11227a6215ee5f
- https://git.kernel.org/stable/c/dbd14f736be02cfe73049bd801af89becd1a0749
- https://git.kernel.org/stable/c/f1efff8858403191361a01269c6fe8dd7f55a385
- http://www.openwall.com/lists/oss-security/2026/07/28/8
Timeline
- nvd_ingest NVD