open vswitch

The Open vSwitch (OVS) MPLS parsing bug tracked as CVE-2025-38146 is a real kernel-level reliability vulnerability that can cause a CPU soft‑lockup by driving the MPLS parsing code into an infinite loop. Multiple independent trackers and downstream advisories confirm the technical root cause and...

Microsoft’s short public answer — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate as a product‑level attestation, but it is not a categorical guarantee that no other Microsoft product contains the vulnerable Open vSwitch code; operators...

The Linux kernel vulnerability CVE-2024-1151 is a stack‑overflow defect in the Open vSwitch (OVS) kernel module that can be triggered by recursive action operations and yields a reliable denial‑of‑service (DoS) — an attacker who can reach the OVS control path can cause the kernel to crash or the...

The Linux kernel has just closed a long‑standing correctness hole in its Open vSwitch (OVS) code: CVE‑2025‑40254 addresses a broken implementation of the set(nsh(... action that never worked as intended, caused kernel crashes during validation, and has now been removed from stable kernels rather...