Description
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openvswitch | 2.15.0+ds1-10 | — |
| Debian 13 | openvswitch | 2.15.0+ds1-10 | — |
| Debian 12 | openvswitch | 2.15.0+ds1-10 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | openvswitch | 2.13.3-0ubuntu0.20.04.2 | USN-5065-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | openvswitch2.11 +4 | 2.11.3-86.el8fdp | RHBA-2021:1163 |
| RHEL 8 | openvswitch2.13 +5 | 2.13.0-114.el8fdp | RHBA-2021:2508 |
| RHEL 8 | openvswitch2.15 +5 | 2.15.0-24.el8fdp | RHBA-2021:2509 |
| RHEL 7 | openvswitch2.11 +3 | 2.11.3-89.el7fdp | RHSA-2021:3942, RHBA-2021:1166 |
| RHEL 7 | openvswitch2.13 +4 | 2.13.0-102.el7fdp | RHBA-2022:8558 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 4 | coreos-installer +1 | 0.10.0-2.rhaos4.9.el8 | RHSA-2021:3758 |
| Red Hat OpenShift 4 | jenkins | 2.289.3.1630554997-1.el8 | RHSA-2021:3758 |
| Red Hat OpenShift 4 | openshift +1 | 4.9.0-202110080828.p0.git.894a78b.assembly.stream.el7 | RHSA-2021:3758 |
| Red Hat OpenShift 4 | openvswitch2.15 +5 | 2.15.0-28.el8fdp | RHSA-2021:3758 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | dpdk | 18.11.9-150100.4.23.1 | SUSE-SU-2023:1795-1 |
| SLES 15 SP4 | openvswitch | 2.11.5-150100.3.18.2 | SUSE-SU-2023:1795-1, SUSE-SU-2022:3099-1 |
| SLES 15 SP3 | openvswitch | 2.14.2-150300.19.3.1 | SUSE-SU-2022:3116-1 |
| SLES 12 SP5 | openvswitch | 2.11.5-3.6.1 | SUSE-SU-2022:3098-1 |
| SLES 12 SP4 | openvswitch | 2.8.10-4.33.1 | SUSE-SU-2023:2360-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | openvswitch | 2.11.5-3.6.1 | SUSE-SU-2022:3098-1 |
| SLES for SAP 12 SP4 | openvswitch | 2.8.10-4.33.1 | SUSE-SU-2023:2360-1 |
| SUSE OpenStack Cloud Crowbar 9 | openvswitch | 2.8.10-4.33.1 | SUSE-SU-2023:2360-1 |
| SUSE OpenStack Cloud 9 | openvswitch | 2.8.10-4.33.1 | SUSE-SU-2023:2360-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openvswitch | 2.17.0-12.1 | openSUSE-SU-2024:11898-1 |
| openSUSE Leap 15.4 | dpdk | 18.11.9-150100.4.23.1 | SUSE-SU-2023:1795-1 |
| openSUSE Leap 15.4 | openvswitch | 2.11.5-150100.3.18.2 | SUSE-SU-2023:1795-1, SUSE-SU-2022:3099-1, SUSE-SU-2022:3096-1 |
| openSUSE Leap 15.3 | openvswitch | 2.13.2-150200.9.17.1 | SUSE-SU-2022:3116-1, SUSE-SU-2022:3096-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.23 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.22 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.21 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.20 | openvswitch | 2.12.3-r2 | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.18 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.17 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.16 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.15 | openvswitch | 2.12.3-r2 | — |
| Alpine v3.14 | openvswitch | 2.12.3-r2 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | openvswitch | 2.17.0-1 | — |
Advisories 15
- RHSA-2021:3758 Red Hat Security Advisory: OpenShift Container Platform 4.9.0 packages and security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHBA-2022:8558 Red Hat Bug Fix Advisory: openvswitch2.13 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:3942 Red Hat Security Advisory: openvswitch2.11 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2021:2509 Red Hat Bug Fix Advisory: openvswitch2.15 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2021:2508 Red Hat Bug Fix Advisory: openvswitch2.13 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2021:1163 Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2021:1166 Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-5065-1 openvswitch vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2022:3096-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3099-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11898-1 libopenvswitch-2_17-0-2.17.0-12.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3098-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2360-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:1795-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:3116-1 Security update for openvswitch SUSE / openSUSE Security Updates · May 2, 2025
References
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openvswitch/OSV-2020-2197.yaml
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27851
- https://github.com/openvswitch/ovs/commit/77cccc74deede443e8b9102299efc869a52b65b2
- https://github.com/openvswitch/ovs/commit/38744b1bcb022c611712527f039722115300f58f
- https://github.com/openvswitch/ovs/commit/65c61b0c23a0d474696d7b1cea522a5016a8aeb3
- https://github.com/openvswitch/ovs/commit/6d67310f4d2524b466b98f05ebccc1add1e8cf35
- https://github.com/openvswitch/ovs/commit/8ce8dc34b5f73b30ce0c1869af9947013c3c6575
- https://github.com/openvswitch/ovs/commit/9926637a80d0d243dbf9c49761046895e9d1a8e2
- GLSA-202311-16 vendor-advisory