NetSight
IP …
medium5.5

CVE-2024-1151

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel.

Impact

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 38, 39
RedhatEnterprise Linux
Versions 8.0, 9.0
LinuxLinux Kernel
through 6.7.8
Version 6.8

Weakness classification

CWE-121CWE-787

References