CVE-2026-74701

CVE-2026-74701 affects the Linux kernel Open vSwitch (OVS) subsystem. When a packet arrives on an ARPHRD_NONE device (e.g. TUN), ovs_flow_key_extract() trusts the user-provided skb->protocol field. If it is ETH_P_TEB, the packet is classified as MAC_PROTO_ETHERNET and key_extract() is invoked ...