CVE-2026-64531

The CVE-2026-64531 issue affects Open vSwitch flow actions stored as nlattrs in the Linux kernel’s net/openvswitch path. A prior change removed a guard on the action length, enabling a total sw_flow_actions stream to exceed 64 KiB and allowing a nested action container to be truncated via nla_len...

EUVD-2026-49109

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving actions length check" allowed the...