Open vSwitch Router DoS

The vulnerability of the ovsdpcmdnew function in the netopenvswitch/datapath.c module, which is part of the Open vSwitch router support in Linux operating systems, is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2022-49959: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovsdpcmdnew-ovsdpchange-ovsdpsetupcallportids allocates array via kmalloc. If for some reason newvport fails during ovsdpcmdnew dp-upcallportids must be freed. Add missing...