AZL-97167 CVE-2026-74701 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in keyextract When a packet arrives on an ARPHRDNONE device e.g. TUN, ovsflowkeyextract trusts the user-provided skb-protocol field: if it is ETHPTEB, the packet is classified as...

CVE-2026-74701

This vulnerability affects the Open vSwitch (OVS) component of the Linux kernel in key_extract() within net/openvswitch/flow.c. When a packet with the ETH_P_TEB protocol arrives on an ARPHRD_NONE device (e.g., TUN), the function unconditionally pulls Ethernet header bytes (MAC addresses and ether...