CVE-2022-49086

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel's openvswitch module. The problem occurs when parsing user-provided actions, as the module may dynamically allocate memory and store pointers in the internal copy of the actions without properly freeing them. This can lead to significant memory leaks, particularly under conditions with a high rate of flow rotation. The issue is difficult to mitigate due to the user's lack of direct control over the datapath flows generated by OVS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.