NetSight
IP …
high7.8

CVE-2025-37998

In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the man…

Impact

In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attribute iteration in output_userspace() with nla_for_each_nested(), which ensures that only well-formed attributes are processed.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.3 before 5.4.294
from 5.5 before 5.10.238
from 5.11 before 5.15.183
from 5.16 before 6.1.139
from 6.2 before 6.6.91
from 6.7 before 6.12.29
DebianDebian Linux
Version 11.0

References