Description
In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attribute iteration in output_userspace() with nla_for_each_nested(), which ensures that only well-formed attributes are processed.
Product status
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before 6712dc21506738f5f22b4f68b7c0d9e0df819dbd
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before 06b4f110c79716c181a8c5da007c259807840232
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before 47f7f00cf2fa3137d5c0416ef1a71bdf77901395
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before bca8df998cce1fead8cbc69144862eadc2e34c87
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before 0236742bd959332181c1fcc41a05b7b709180501
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before ec334aaab74705cc515205e1da3cb369fdfd93cd
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before 4fa672cbce9c86c3efb8621df1ae580d47813430
ccb1352e76cff0524e7ccb2074826a092dd13016 (git) before 6beb6835c1fbb3f676aebb51a5fee6b77fed9308
3.3
Any version before 3.3
5.4.294 (semver)
5.10.238 (semver)
5.15.183 (semver)
6.1.139 (semver)
6.6.91 (semver)
6.12.29 (semver)
6.14.7 (semver)
6.15 (original_commit_for_fix)
References
lists.debian.org/debian-lts-announce/2025/10/msg00007.html
lists.debian.org/debian-lts-announce/2025/08/msg00010.html
git.kernel.org/...c/6712dc21506738f5f22b4f68b7c0d9e0df819dbd
git.kernel.org/...c/06b4f110c79716c181a8c5da007c259807840232
git.kernel.org/...c/47f7f00cf2fa3137d5c0416ef1a71bdf77901395
git.kernel.org/...c/bca8df998cce1fead8cbc69144862eadc2e34c87
git.kernel.org/...c/0236742bd959332181c1fcc41a05b7b709180501
git.kernel.org/...c/ec334aaab74705cc515205e1da3cb369fdfd93cd
git.kernel.org/...c/4fa672cbce9c86c3efb8621df1ae580d47813430
git.kernel.org/...c/6beb6835c1fbb3f676aebb51a5fee6b77fed9308
www.zerodayinitiative.com/advisories/ZDI-25-307/