Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix middle attribute validation in pushnsh action The pushnsh action structure looks like this: OVSACTIONATTRPUSHNSHOVSKEYATTRNSHOVSNSHKEYATTRBASE,... The outermost OVSACTIONATTRPUSHNSH attribute is validated by...

CVE-2025-68785

CVE-2025-68785 concerns the Linux kernel net/openvswitch push_nsh() action. The description states a middle attribute (intended to be OVS_KEY_ATTR_NSH) is not validated, allowing unsafe double-unwrapping of nla_data() which can lead to memory access issues during action execution. Connected sourc...

Linux Distros Unpatched Vulnerability : CVE-2025-68785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix middle attribute validation in pushnsh action The pushnsh action structure looks like this:...