A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openvswitch | Aug 22, 2024 | Feb 22, 2024 | |
| Debian | debian-upgrade-openvswitch | Mar 18, 2024 | Feb 22, 2024 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Feb 22, 2024 | |
| Suse | — | suse-upgrade-libopenvswitch-2_13-0suse-upgrade-libopenvswitch-2_14-0suse-upgrade-libopenvswitch-3_1-0suse-upgrade-libovn-20_03-0suse-upgrade-libovn-20_06-0suse-upgrade-libovn-23_03-0suse-upgrade-openvswitchsuse-upgrade-openvswitch-develsuse-upgrade-openvswitch-docsuse-upgrade-openvswitch-ipsecsuse-upgrade-openvswitch-pkisuse-upgrade-openvswitch-testsuse-upgrade-openvswitch-vtepsuse-upgrade-openvswitch3suse-upgrade-openvswitch3-develsuse-upgrade-openvswitch3-docsuse-upgrade-openvswitch3-ipsecsuse-upgrade-openvswitch3-pkisuse-upgrade-openvswitch3-testsuse-upgrade-openvswitch3-vtepsuse-upgrade-ovnsuse-upgrade-ovn-centralsuse-upgrade-ovn-develsuse-upgrade-ovn-docsuse-upgrade-ovn-dockersuse-upgrade-ovn-hostsuse-upgrade-ovn-vtepsuse-upgrade-ovn3suse-upgrade-ovn3-centralsuse-upgrade-ovn3-develsuse-upgrade-ovn3-docsuse-upgrade-ovn3-dockersuse-upgrade-ovn3-hostsuse-upgrade-ovn3-vtepsuse-upgrade-python3-ovssuse-upgrade-python3-ovs3 | Mar 5, 2024 | Feb 22, 2024 |
| Ubuntu | ubuntu-upgrade-openvswitch-commonubuntu-upgrade-python3-openvswitch | Mar 13, 2024 | Feb 22, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Feb 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub