CVE-2026-64531

CVE-2026-64531 — OVSwrap PoC de escalada de privilegios local usuario normal → root del módulo Open vSwitch del kernel de Linux. Aprovecha un desbordamiento de enteros en el campo nlalen de 16 bits para escalar de usuario normal hasta root. Resumen de la vulnerabilidad Cuando el flujo de acciones...

OVSwrap

OVSwrap CVE-2026-64531 Análisis !WARNING El PoC se proporciona únicamente para ayudar a defensores, mantenedores y equipos de seguridad autorizados a validar parches, mitigaciones, detecciones y exposición en sistemas que poseen o para los que están explícitamente autorizados a probar. Usted es e...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, where the nlalen field is of type u16. The vulnerability identified as commit a1e64addf3ff "net: openvswitch: remove...

K000162959: Linux kernel vulnerability CVE-2026-64531

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving...

AZL-93965 CVE-2026-64531 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving actions length check" allowed the...

CVE-2026-64531: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving actions length check" allowed the...

CVE-2025-37789 net: openvswitch: fix nested key length validation in the set() action

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set action It's not safe to access nlalenovskey if the data is smaller than the netlink header. Check that the attribute is OK first...