CVE-2025-37998

openvswitch: Fix unsafe attribute parsing in output_userspace()

State: Published
Severity: 7.8 High
Published: May 29, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: Fix unsafe attribute parsing in output_userspace()

This patch replaces the manual Netlink attribute iteration in output_userspace() with nla_for_each_nested(), which ensures that only well-formed attributes are processed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ccb1352e76cff0524e7ccb2074826a092dd13016 to before 6712dc21506738f5f22b4f68b7c0d9e0df819dbdAffected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 06b4f110c79716c181a8c5da007c259807840232Affected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 47f7f00cf2fa3137d5c0416ef1a71bdf77901395Affected ccb1352e76cff0524e7ccb2074826a092dd13016 to before bca8df998cce1fead8cbc69144862eadc2e34c87Affected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 0236742bd959332181c1fcc41a05b7b709180501Affected ccb1352e76cff0524e7ccb2074826a092dd13016 to before ec334aaab74705cc515205e1da3cb369fdfd93cdAffected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 4fa672cbce9c86c3efb8621df1ae580d47813430Affected ccb1352e76cff0524e7ccb2074826a092dd13016 to before 6beb6835c1fbb3f676aebb51a5fee6b77fed9308Affected
LinuxLinux	3.3Affected before 3.3Not affected 5.4.294 through 5.4.Not affected 5.10.238 through 5.10.Not affected 5.15.183 through 5.15.Not affected 6.1.139 through 6.1.Not affected 6.6.91 through 6.6.Not affected 6.12.29 through 6.12.Not affected 6.14.7 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

ccb1352e76cff0524e7ccb2074826a092dd13016 to before 6712dc21506738f5f22b4f68b7c0d9e0df819dbdAffected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 06b4f110c79716c181a8c5da007c259807840232Affected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 47f7f00cf2fa3137d5c0416ef1a71bdf77901395Affected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before bca8df998cce1fead8cbc69144862eadc2e34c87Affected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 0236742bd959332181c1fcc41a05b7b709180501Affected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before ec334aaab74705cc515205e1da3cb369fdfd93cdAffected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 4fa672cbce9c86c3efb8621df1ae580d47813430Affected
ccb1352e76cff0524e7ccb2074826a092dd13016 to before 6beb6835c1fbb3f676aebb51a5fee6b77fed9308Affected

LinuxLinux

3.3Affected
before 3.3Not affected
5.4.294 through 5.4.*Not affected
5.10.238 through 5.10.*Not affected
5.15.183 through 5.15.*Not affected
6.1.139 through 6.1.*Not affected
6.6.91 through 6.6.*Not affected
6.12.29 through 6.12.*Not affected
6.14.7 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.