CVE-2026-74464

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the openvswitch module of the Linux kernel during connection tracking. The issue arises because ovs ct execute() always steals or frees the socket buffer (skb) on failure, whereas ovs flow key update() does not. If ovs flow key update() fails and the system returns immediately, the skb is leaked. This scenario occurs when a packet becomes unparseable after applying a set of actions to a previously parseable skb.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.