net: openvswitch: fix skb leak on flow key update failure during ct (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.18 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix skb leak on flow key update failure during ct ovs_ct_execute() always steals or frees the skb on failure while ovs_flow_key_update() does not. So, if it fails and we return right away, the skb ends up leaked. Fix that by breaking instead and letting the common error handling code at the bottom of the loop to free the skb properly. This is a very unlikely scenario as it requires the packet to become unparseable by applying a set of actions on a previously parseable skb, but should be fixed nevertheless. Reported by Sashiko.
References
- https://git.kernel.org/stable/c/b77126b2915900f69f9fcf5d624a77c8e6d50c31
- https://git.kernel.org/stable/c/6cc523eaee72c4e91894136cff64946ae9de2cda
- https://git.kernel.org/stable/c/22e0ca88090d89c128078062186b03bb5fdc4f98
- https://git.kernel.org/stable/c/736e972f3f8a304158345223ac6e816166a467ce
- https://git.kernel.org/stable/c/e84dfaac50aab45ad8c670da43e3aa1f97bd2a41
- https://git.kernel.org/stable/c/e0ba8eaef2a0d02a7a485e6a7157e47272b65cea
- https://git.kernel.org/stable/c/393f3c72600ab6721d732a0ab245bc896c5b28fc
- https://git.kernel.org/stable/c/bc62e843bc48f933da765ce47079fd992e535794
European references
- ENISA EUVD · EUVD-2026-59657
- GCVE · GCVE-0-2026-74464
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1372 — Multiples vulnérabilités dans les produits SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1090 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ec0d043d05e6e3c0c2fac5de922c800c027c6386 < b77126b2915900f69f9fcf5d624a77c8e6d50c31 ; affected ec0d043d05e6e3c0c2fac5de922c800c027c6386 < 6cc523eaee72c4e91894136cff64946ae9de2cda ; affected ec0d043d05e6e3c0c2fac5de922c800c027c6386 < 22e0ca88090d89c128078062186b03bb5fdc4f98 ; affected ec0d043d05e6e3c0c2fac5de922c800c027c6386 < 736e972f3f8a304158345223ac6e816166a467ce ; affected ec0d043d05e6e3c0c2fac5de922c800c027c6386 < e84dfaac50aab45ad8c670da43e3aa1f97bd2a41 ; affected ec0d043d05e6e3c0c2fac5de922c800c027c6386 < e0ba8eaef2a0d02a7a485e6a7157e47272b65cea |
| Linux · Linux | affected 4.3 ; unaffected 0 < 4.3 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.151 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |