Openvswitch: Fix Leak of Nested Actions in Kernel
Summary
GSD-2022-1001359: net: openvswitch: fix leak of nested actions. Affects Kernel versions >= 34ae932a40369be6bd6ea97d66b6686361b4370d, < 3554c214b83ec9a839ed574263a34218f372990c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Openvswitch is a virtual switch that is used to manage and control network traffic in virtualized environments. It is a part of the Linux Kernel and provides a flexible and programmable framework for network virtualization. Openvswitch allows users to define and apply various actions on network packets, such as forwarding, dropping, and modifying. However, a vulnerability has been discovered in Openvswitch that can lead to a leak of nested actions.
Vulnerability Detail
The vulnerability in Openvswitch allows an attacker to cause a memory leak by creating and applying nested actions. When nested actions are created and applied repeatedly, it can exhaust the available memory resources, leading to a denial of service condition. This vulnerability can be exploited remotely by an attacker with network access to the affected system. The impact of this vulnerability can vary depending on the system's configuration and the actions being used. It is important to note that this vulnerability has not been proven to have a specific attack vector or exploit at this time.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the official fix by updating the Linux Kernel.
Conclusion
The vulnerability in Openvswitch that leads to a memory leak of nested actions can be mitigated by updating the Linux Kernel to version v5.16.20 or later. It is important to regularly update the Kernel to ensure the latest security patches and fixes are applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Openvswitch is a virtual switch used for network virtualization in Linux Kernel-based systems. It provides a flexible and programmable framework for managing network traffic.
This vulnerability can lead to a denial of service condition by causing a memory leak. The impact may vary depending on the system's configuration and the actions being used.
Yes, this vulnerability can be exploited remotely by an attacker with network access to the affected system.
No, there is no known exploit for this vulnerability at this time.
To fix this vulnerability, update the Linux Kernel to version v5.16.20 or later, which includes the necessary fix for this issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
