CVE-2026-99025 openvswitch: fix soft lockup in the netlink flow dump

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink flow dump and panicked. ovsflowcmddump calls ovsflowstatsget for eve...

CVE-2026-99025

A vulnerability in the Linux kernel 's openvswitch component causes a soft lockup and system panic during a netlink flow dump . The issue occurs because ovs_flow_cmd_dump() calls ovs_flow_stats_get(), which uses spin_unlock_bh(). This repeatedly enables local softirqs, causing the dumping thread ...

EUVD-2026-108819

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink flow dump and panicked. ovsflowcmddump calls ovsflowstatsget for eve...

CVE-2026-99025

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink flow dump and panicked. ovsflowcmddump calls ovsflowstatsget for eve...

Linux Distros Unpatched Vulnerability : CVE-2026-99025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink...

PT-2026-122002

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapath flows hit a soft lockup inside a single netlink flow dump and panicked. ovs flow cmd dump calls ovs flow stats get f...

SUSE CVE-2026-98490

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the extensions area is wired into expectations list: - nfcthelper - helper-help - nfctexpectrelatedreport -...

RLSA-2026:86033 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: mxuport: fix memory...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143085)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143085 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142543 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142694 advisory. In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in keyextract When a packet arrives on an ARPHRDNON...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142526 advisory. In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVSACTIONATTRTRUNC currently stores a delta...

K000163826: Linux kernel vulnerabilities CVE-2026-46164 and CVE-2026-46165

Security Advisory Description CVE-2026-46164 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in createspaceinfosubgroup error path When kobjectinitandadd fails, the call chain is: createspaceinfosubgroup - btrfssysfsaddspaceinfotype - kobjectinitandadd -...

CLSA-2025-1754037492 Fix CVE(s): CVE-2025-21760, CVE-2025-21761, CVE-2025-21762, CVE-2025-21764

Ubuntu: 4.15.0-250.261 Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21760 // CVE-url: https://ubuntu.com/security/CVE-2025-21760 - ndisc: extend RCU protection in ndiscsendskb Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21761 // CVE-url:...

CLSA-2025-1754037789 Fix CVE(s): CVE-2025-21760, CVE-2025-21761, CVE-2025-21762, CVE-2025-21764

Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21760 // CVE-url: https://ubuntu.com/security/CVE-2025-21760 - ndisc: extend RCU protection in ndiscsendskb Focal update: v5.4.291 upstream stable release LP: 2106002 // CVE-2025-21761 // CVE-url:...

CLSA-2026-1783791447 kernel: Fix of 307 CVEs

gpiolib: cdev: Set lineeventstate::irq after IRQ register successfully CVE-2022-48660 - ipv4: check for NULL idev in iprouteusehint CVE-2024-36008 - KEYS: trusted: Do not use WARN when encode fails CVE-2024-36975 - Fix userfaultfdapi to return EINVAL as expected CVE-2024-41027 - xhci: Fix null...

CLSA-2026-1791800936 kernel: Fix of 191 CVEs

drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check CVE-2026-89818 - drm/amdgpu/vcn4: Avoid overflow on msg bound check CVE-2026-46199 - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg CVE-2026-46199 - drm/amdgpu/vcn3: Avoid overflow on msg bound check CVE-2026-46230 -...

CLSA-2024-1728935304 kernel: Fix of 12 CVEs

xfs: don't walk off the end of a directory data block CVE-2024-41013 - net/sched: clsu32: fix netns refcount changes in u32change CVE-2022-29581 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - net: sched:...

AlmaLinux 10 : kernel (ALSA-2026:85321)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:85321 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-5293...

Linux Distros Unpatched Vulnerability : CVE-2026-98491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entry gets cloned, we may end up committing...