A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openvswitch | Aug 22, 2024 | Feb 22, 2024 |
| Debian | — | Upgrade openvswitch | Mar 18, 2024 | Feb 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 22, 2024 |
| Suse | — | Upgrade openvswitch-develUpgrade ovn3-hostUpgrade libopenvswitch-3_1-0Upgrade openvswitch3Upgrade openvswitch3-pkiUpgrade ovn-centralUpgrade ovn3Upgrade openvswitch3-develUpgrade ovnUpgrade ovn3-vtepUpgrade openvswitch-testUpgrade openvswitch3-docUpgrade libopenvswitch-2_13-0Upgrade ovn-dockerUpgrade openvswitch3-ipsecUpgrade python3-ovs3Upgrade ovn3-docUpgrade openvswitch-ipsecUpgrade libopenvswitch-2_14-0Upgrade ovn-vtepUpgrade openvswitch3-vtepUpgrade openvswitch-pkiUpgrade libovn-23_03-0Upgrade openvswitch3-testUpgrade python3-ovsUpgrade ovn3-dockerUpgrade ovn3-centralUpgrade libovn-20_06-0Upgrade ovn-hostUpgrade libovn-20_03-0Upgrade ovn-docUpgrade openvswitch-vtepUpgrade openvswitchUpgrade ovn-develUpgrade openvswitch-docUpgrade ovn3-devel | Mar 5, 2024 | Feb 22, 2024 |
| Ubuntu | — | Upgrade openvswitch-commonUpgrade python3-openvswitch | Mar 13, 2024 | Feb 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub