Openvswitch: Fix Leak of Nested Actions in Kernel
Summary
GSD-2022-1001976: net: openvswitch: fix leak of nested actions. Affects Kernel versions >= 34ae932a40369be6bd6ea97d66b6686361b4370d, < 5ae05b5eb58773cfec307ff88aff4cfd843c4cff. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Openvswitch is a software-based virtual switch that is commonly used in virtualized environments to enable network connectivity between virtual machines and physical networks. It is a part of the Linux Kernel and provides a flexible and programmable network infrastructure. However, a vulnerability has been discovered in Openvswitch that can lead to a leak of nested actions.
Vulnerability Detail
The vulnerability in Openvswitch allows for a leak of nested actions. This means that under certain conditions, actions within actions may not be properly cleaned up, leading to a memory leak. An attacker could potentially exploit this vulnerability to exhaust system resources and cause a denial-of-service condition. The vulnerability was introduced in version 4.3 of the Linux Kernel and has been fixed in version 5.10.111.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible.
Conclusion
The vulnerability in Openvswitch that leads to a leak of nested actions has been identified and fixed in Linux Kernel version 5.10.111. It is recommended to update the kernel to the latest version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Openvswitch is a software-based virtual switch used in virtualized environments to enable network connectivity between virtual machines and physical networks.
The vulnerability can lead to a memory leak, potentially causing a denial-of-service condition.
To fix this vulnerability, update the Linux Kernel to version 5.10.111 or later.
There is no known workaround for this vulnerability. It is recommended to apply the fix as soon as possible.
For more information about this vulnerability, refer to the vulnerability details provided in the Open Source Vulnerability format.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
