Lucene search
K

7 matches found

CVE
CVE
added 2026/05/27 9:24 a.m.26 views

CVE-2026-45840

The CVE-2026-45840 entry concerns the Linux kernel’s Open vSwitch datapath: the upcall port-id handling in vport netlink replies could be overflowed when a CAP_NET_ADMIN user supplies a large PID array. The bug arises because ovs_vport_set_upcall_portids() accepts any non-zero multiple of sizeof(...

5.9AI score0.0018EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.9 views

PT-2026-43674

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the openvswitch component where vport netlink reply helpers allocate a fixed-size socket buffer skb using nlmsg newNLMSG DEFAULT SIZE, ..., but serialize the full upca...

9.8CVSS6.1AI score0.00514EPSS
Exploits0References399
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-45840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: cap upcall PID array size and pre-size vport replies The vport netlink reply helpers allocate a fixed-size skb with nlmsgnewNLMSGDEFAULTSIZE, ... b...

6AI score0.0018EPSS
Exploits0References4
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.5 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: openvswitch: Fixed a memory leak that occurred during failed datapath creation. ovsdpcmdnew - ovsdpchange - ovsdpsetupcallportids allocates an array using kmalloc. If newvport fails during ovsdpcmdnew, dp-upcallportids must be...

5.5CVSS5.5AI score0.00154EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-55241

Malicious code in bioql PyPI...

5.8AI score0.00154EPSS
Exploits0References3
OSV
OSV
added 2025/06/18 11:15 a.m.1 views

DEBIAN-CVE-2022-49959

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovsdpcmdnew-ovsdpchange-ovsdpsetupcallportids allocates array via kmalloc. If for some reason newvport fails during ovsdpcmdnew dp-upcallportids must be freed. Add missing...

5.5CVSS5.2AI score0.00154EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.2 views

UBUNTU-CVE-2022-49959

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovsdpcmdnew-ovsdpchange-ovsdpsetupcallportids allocates array via kmalloc. If for some reason newvport fails during ovsdpcmdnew dp-upcallportids must be freed. Add missing...

5.5CVSS5.9AI score0.00154EPSS
Exploits0References5
Rows per page
Query Builder