CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.

References

Affected packages

Git / github.com/openstack/nova

Affected ranges

Type

GIT

Repo

https://github.com/openstack/nova

Events

Introduced

Fixed

a9e81626c5e9dac897759c5f66c7ae1b4efa3c6d

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "23.2.2"
        }
    ]
}

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "24.0.0"
            },
            {
                "fixed": "24.1.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "25.0.0"
            },
            {
                "fixed": "25.0.2"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37394.json"