CVE-2025-37789

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the openvswitch component. The issue concerns the validation of nested key length in the set() action, where it is not safe to access nla len(ovs key) if the data is smaller than the netlink header. The fix involves checking that the attribute is OK before accessing it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.