openvswitch: Fix setting ipv6 fields causing hw csum failure
Summary
GSD-2022-1000860: openvswitch: Fix setting ipv6 fields causing hw csum failure. Affects Kernel versions >= 3fdbd1ce11e5c0d7cafbe44c942c5cad61113d7b, < 1df9d552fe84bb7d7a6a361b5bb8a9273f9f799d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Openvswitch is a software-based virtual switch that is commonly used in virtualized environments. It provides network connectivity between virtual machines and physical networks. The vulnerability in openvswitch relates to setting ipv6 fields, which can lead to hardware checksum failures. This vulnerability was introduced in version v3.8 of the Linux Kernel and has been fixed in version v5.10.103.
Vulnerability Detail
The vulnerability in openvswitch occurs when setting ipv6 fields, causing hardware checksum failures. This can lead to network connectivity issues and potential security vulnerabilities. The exact impact and attack plausibility of this vulnerability have not yet been proven. It is important to update to the fixed version of the Linux Kernel to mitigate this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in openvswitch that causes hardware checksum failures when setting ipv6 fields can be mitigated by updating to the fixed version of the Linux Kernel. It is important to follow proper upgrade procedures and test the new kernel before deploying it in production. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Openvswitch is a software-based virtual switch used in virtualized environments to provide network connectivity between virtual machines and physical networks.
The vulnerability can cause hardware checksum failures and network connectivity issues. It may also introduce potential security vulnerabilities.
Update the Linux Kernel to version v5.10.103 or later.
The fixed version of the Linux Kernel can be found in the official Linux Kernel repository.
There is no known workaround for this vulnerability. Updating to the fixed version of the Linux Kernel is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
