CVE-2025-37789
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-37789
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37789.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-37789
- Downstream
- Related
- Published
- 2025-05-01T14:15:43Z
- Modified
- 2025-08-09T19:01:27Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: fix nested key length validation in the set() action
It's not safe to access nlalen(ovskey) if the data is smaller than the netlink header. Check that the attribute is OK first.
- References
-
- https://git.kernel.org/stable/c/03d7262dd53e8c404da35cc81aaa887fd901f76b
- https://git.kernel.org/stable/c/1489c195c8eecd262aa6712761ba5288203e28ec
- https://git.kernel.org/stable/c/54c6957d1123a2032099b9eab51c314800f677ce
- https://git.kernel.org/stable/c/65d91192aa66f05710cfddf6a14b5a25ee554dba
- https://git.kernel.org/stable/c/7fcaec0b2ab8fa5fbf0b45e5512364a168f445bd
- https://git.kernel.org/stable/c/824a7c2df5127b2402b68a21a265d413e78dcad7
- https://git.kernel.org/stable/c/a27526e6b48eee9e2d82efff502c4f272f1a91d4
- https://git.kernel.org/stable/c/be80768d4f3b6fd13f421451cc3fee8778aba8bc