open vswitch

  1. CVE-2025-38146 Open vSwitch MPLS Dead Loop Causes CPU Soft Locks (Azure Linux Attested)

    The Open vSwitch (OVS) MPLS parsing bug tracked as CVE-2025-38146 is a real kernel-level reliability vulnerability that can cause a CPU soft‑lockup by driving the MPLS parsing code into an infinite loop. Multiple independent trackers and downstream advisories confirm the technical root cause and...
  2. Azure Linux attestation for CVE-2025-37998: What defenders must know

    Microsoft’s short public answer — that “Azure Linux includes this open‑source library and is therefore potentially affected” — is accurate as a product‑level attestation, but it is not a categorical guarantee that no other Microsoft product contains the vulnerable Open vSwitch code; operators...
  3. CVE-2024-1151 Open vSwitch Kernel DoS: Patch and Protect

    The Linux kernel vulnerability CVE-2024-1151 is a stack‑overflow defect in the Open vSwitch (OVS) kernel module that can be triggered by recursive action operations and yields a reliable denial‑of‑service (DoS) — an attacker who can reach the OVS control path can cause the kernel to crash or the...
  4. Linux Kernel OVS CVE-2025-40254: Removal of broken set(nsh) action

    The Linux kernel has just closed a long‑standing correctness hole in its Open vSwitch (OVS) code: CVE‑2025‑40254 addresses a broken implementation of the set(nsh(... action that never worked as intended, caused kernel crashes during validation, and has now been removed from stable kernels rather...