CVE-2026-74664

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the openvswitch module where ovs flow cmd new() preallocates a reply skb (socket buffer) based on the request flow identifier before acquiring the ovs mutex. During flow updates, if a request with a UFID (Unique Flow Identifier) fails the UFID lookup and falls back to a flow key lookup, it may find an existing key-identified flow. Because ovs flow cmd fill info() writes the matched flow's identifier rather than the request identifier, a short request UFID may result in insufficient space for the key identifier. This can lead to a failure with -EMSGSIZE and trigger a BUG ON(error < 0) in the update path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.