The Linux kernel has just closed a long‑standing correctness hole in its Open vSwitch (OVS) code: CVE‑2025‑40254 addresses a broken implementation of the set(nsh(... action that never worked as intended, caused kernel crashes during validation, and has now been removed from stable kernels rather...