CVE-2025-37789

net: openvswitch: fix nested key length validation in the set() action

State: Published
Severity: 7.8 High
Published: May 1, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: fix nested key length validation in the set() action

It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ccb1352e76cff0524e7ccb2074826a092dd13016 to before 54c6957d1123a2032099b9eab51c314800f677ceAffected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 7fcaec0b2ab8fa5fbf0b45e5512364a168f445bdAffected ccb1352e76cff0524e7ccb2074826a092dd13016 to before a27526e6b48eee9e2d82efff502c4f272f1a91d4Affected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 1489c195c8eecd262aa6712761ba5288203e28ecAffected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 824a7c2df5127b2402b68a21a265d413e78dcad7Affected ccb1352e76cff0524e7ccb2074826a092dd13016 to before be80768d4f3b6fd13f421451cc3fee8778aba8bcAffected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 03d7262dd53e8c404da35cc81aaa887fd901f76bAffected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 65d91192aa66f05710cfddf6a14b5a25ee554dbaAffected
LinuxLinux	3.3Affected before 3.3Not affected 5.4.293 through 5.4.Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.135 through 6.1.Not affected 6.6.88 through 6.6.Not affected 6.12.25 through 6.12.Not affected 6.14.4 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

ccb1352e76cff0524e7ccb2074826a092dd13016 to before 54c6957d1123a2032099b9eab51c314800f677ceAffected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 7fcaec0b2ab8fa5fbf0b45e5512364a168f445bdAffected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before a27526e6b48eee9e2d82efff502c4f272f1a91d4Affected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 1489c195c8eecd262aa6712761ba5288203e28ecAffected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 824a7c2df5127b2402b68a21a265d413e78dcad7Affected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before be80768d4f3b6fd13f421451cc3fee8778aba8bcAffected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 03d7262dd53e8c404da35cc81aaa887fd901f76bAffected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 65d91192aa66f05710cfddf6a14b5a25ee554dbaAffected

LinuxLinux

3.3Affected
before 3.3Not affected
5.4.293 through 5.4.*Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.135 through 6.1.*Not affected
6.6.88 through 6.6.*Not affected
6.12.25 through 6.12.*Not affected
6.14.4 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.