In the Linux kernel, the following vulnerability has been resolved:
openvswitch: use RCU protection in ovsvportcmdfillinfo()
ovsvportcmdfillinfo() can be called without RTNL or RCU.
Use RCU protection and devnetrcu() to avoid potential UAF.
[
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90b2f49a502fa71090d9f4fe29a2f51fe5dff76d",
"id": "CVE-2025-21761-04a73f58"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "137239796631413910895877455578839789172",
"length": 1256.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e01abc34e87abd091e619161a20f54ed4e3e2da",
"id": "CVE-2025-21761-0e3d90cb"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a884f57600e463f69d7b279c4598b865260b62a1",
"id": "CVE-2025-21761-16836d20"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a849a10de5e04d798f7f286a2f1ca174719a617a",
"id": "CVE-2025-21761-248ad9a8"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "137239796631413910895877455578839789172",
"length": 1256.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8816b3f1f151373fd30f1996f00480126c8bb11",
"id": "CVE-2025-21761-31567f54"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ec57509c36c8b9a23e50b7858dda0c520a2d074",
"id": "CVE-2025-21761-35d8f3eb"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "296457881782486409328619226730424111702",
"length": 1313.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ec57509c36c8b9a23e50b7858dda0c520a2d074",
"id": "CVE-2025-21761-489e6f45"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "296457881782486409328619226730424111702",
"length": 1313.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90b2f49a502fa71090d9f4fe29a2f51fe5dff76d",
"id": "CVE-2025-21761-54354da1"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "137239796631413910895877455578839789172",
"length": 1256.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a884f57600e463f69d7b279c4598b865260b62a1",
"id": "CVE-2025-21761-6cec3738"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e85a25d1a9985645e796039e843d1de581d2de1e",
"id": "CVE-2025-21761-84ccc98d"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a8816b3f1f151373fd30f1996f00480126c8bb11",
"id": "CVE-2025-21761-9c64cf7b"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "137239796631413910895877455578839789172",
"length": 1256.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e85a25d1a9985645e796039e843d1de581d2de1e",
"id": "CVE-2025-21761-a1c84dd6"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "296457881782486409328619226730424111702",
"length": 1313.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a849a10de5e04d798f7f286a2f1ca174719a617a",
"id": "CVE-2025-21761-ba4d980f"
},
{
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"digest": {
"function_hash": "296457881782486409328619226730424111702",
"length": 1313.0
},
"target": {
"function": "ovs_vport_cmd_fill_info",
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5828937742af74666192835d657095d95c53dbd0",
"id": "CVE-2025-21761-c17cae5a"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7e01abc34e87abd091e619161a20f54ed4e3e2da",
"id": "CVE-2025-21761-cfbbece6"
},
{
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"28296246019712345409528129462462621908",
"14261699075712480878628968688378684169",
"335893508486987417782648340490019378617",
"66308808807809957300991744153093922557",
"288423969720088446934223443727989136672",
"313393062917184642844938932590686537556",
"266513342806220194667132679597243628981",
"302951528205707696639433067253751918817",
"280015545669959931409457974021951558052",
"279065617881131009465959142107617608618",
"225566281902601333006784069395290375228",
"237470403495118201096849005565500575759",
"230608338741073020227146034588263754940",
"325156861376968592187383044790635462159",
"42324283181440258068399172909895285874"
]
},
"target": {
"file": "net/openvswitch/datapath.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5828937742af74666192835d657095d95c53dbd0",
"id": "CVE-2025-21761-d237ce15"
}
]