Description
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | openvswitch | — | — |
| Red Hat | Fast Datapath for RHEL 7 | — | — |
| Red Hat | Fast Datapath for RHEL 8 | — | — |
| Red Hat | Fast Datapath for RHEL 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 3.11 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat OpenStack Platform 16.1 | — | — |
| Red Hat | Red Hat OpenStack Platform 16.2 | — | — |
| Red Hat | Red Hat Virtualization 4 | — | — |
| Fedora | Fedora | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openvswitch | 3.1.2-1 | — |
| Debian 13 | openvswitch | 3.1.2-1 | — |
| Debian 12 | openvswitch | 3.1.0-2+deb12u1 | DSA-5640-1 |
| Debian 11 | openvswitch | 2.15.0+ds1-2+deb11u5 | DSA-5640-1 |
| Debian 10 | openvswitch | 2.10.7+ds1-0+deb10u5 | DLA-3734-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | openvswitch | 2.17.9-0ubuntu0.22.04.1 | USN-6690-1 |
| Ubuntu 20.04 LTS | openvswitch | 2.13.8-0ubuntu1.4 | USN-6690-1, USN-6514-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | openvswitch | 2.9.8-0ubuntu0.18.04.5+esm1 | USN-6514-1 |
| Ubuntu Pro 16.04 LTS | openvswitch | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | openvswitch2.17 +4 | 2.17.0-131.el9fdp | RHBA-2024:1226 |
| RHEL 9 | openvswitch3.1 +4 | 3.1.0-88.el9fdp | RHSA-2024:1227 |
| RHEL 9 | openvswitch3.2 +4 | 3.2.0-56.el9fdp | RHBA-2024:1228 |
| RHEL 8 | openvswitch2.17 +5 | 2.17.0-148.el8fdp | RHSA-2024:1234 |
| RHEL 8 | openvswitch3.1 +5 | 3.1.0-96.el8fdp | RHSA-2024:1235 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | openvswitch | 3.1.7-150600.33.9.1 | SUSE-SU-2026:0280-1 |
| SLES 15 SP5 | openvswitch | 2.14.2-150400.24.14.2 | SUSE-SU-2023:4661-1, SUSE-SU-2023:4573-1 |
| SLES 15 SP5 | openvswitch3 | 3.1.0-150500.3.11.1 | SUSE-SU-2026:0290-1, SUSE-SU-2023:4657-1 |
| SLES 15 SP4 | openvswitch | 2.14.2-150400.24.14.2 | SUSE-SU-2023:4661-1, SUSE-SU-2023:4573-1 |
| SLES 15 SP3 | openvswitch | 2.14.2-150300.19.11.1 | SUSE-SU-2023:4714-1, SUSE-SU-2023:4508-1 |
| SLES 15 SP2 | openvswitch | 2.13.2-150200.9.25.1 | SUSE-SU-2023:4666-1, SUSE-SU-2023:4571-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | openvswitch | 3.1.7-150600.33.9.1 | SUSE-SU-2026:0280-1 |
| SLES for SAP 15 SP5 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
| SLES for SAP 15 SP3 | openvswitch | 2.14.2-150300.19.11.1 | SUSE-SU-2023:4714-1, SUSE-SU-2023:4508-1 |
| SLES for SAP 15 SP2 | openvswitch | 2.13.2-150200.9.25.1 | SUSE-SU-2023:4666-1, SUSE-SU-2023:4571-1 |
| SLE Micro 6.1 | openvswitch | 3.1.7-slfo.1.1_2.1 | SUSE-SU-2026:20061-1 |
| SLE Micro 6.0 | openvswitch | 3.1.7-4.1 | SUSE-SU-2026:20049-1 |
| SLE Micro 5.5 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
| SLE HPC 15 SP5 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
| SLE HPC 15 SP3 | openvswitch | 2.14.2-150300.19.11.1 | SUSE-SU-2023:4714-1, SUSE-SU-2023:4508-1 |
| SLE HPC 15 SP2 | openvswitch | 2.13.2-150200.9.25.1 | SUSE-SU-2023:4666-1, SUSE-SU-2023:4571-1 |
| SUSE Enterprise Storage 7.1 | openvswitch | 2.14.2-150300.19.11.1 | SUSE-SU-2023:4714-1, SUSE-SU-2023:4508-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openvswitch | 3.1.0-18.1 | openSUSE-SU-2024:13657-1 |
| openSUSE Leap 15.6 | openvswitch | 3.1.7-150600.33.9.1 | SUSE-SU-2026:0280-1 |
| openSUSE Leap 15.6 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
| openSUSE Leap 15.5 | openvswitch | 2.14.2-150400.24.14.2 | SUSE-SU-2023:4661-1, SUSE-SU-2023:4573-1 |
| openSUSE Leap 15.5 | openvswitch3 | 3.1.0-150500.3.11.1 | SUSE-SU-2023:4657-1 |
| openSUSE Leap 15.4 | openvswitch | 2.13.2-150200.9.25.1 | SUSE-SU-2023:4666-1, SUSE-SU-2023:4661-1, SUSE-SU-2023:4573-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openvswitch | 2.17.9-r0 | — |
| Alpine v3.23 | openvswitch | 2.17.9-r0 | — |
| Alpine v3.22 | openvswitch | 2.17.9-r0 | — |
| Alpine v3.21 | openvswitch | 2.17.9-r0 | — |
| Alpine v3.20 | openvswitch | 2.17.9-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openvswitch | 2.17.9-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | openvswitch | 3.3.0-1 | — |
| Azure Linux 2 (CBL-Mariner) | openvswitch | 2.17.9-1 | — |
Advisories 21
- RHSA-2024:1235 Red Hat Security Advisory: openvswitch3.1 security update Red Hat Security Advisories (RHSA) · Sep 20, 2026
- RHSA-2024:1234 Red Hat Security Advisory: openvswitch2.17 security update Red Hat Security Advisories (RHSA) · Sep 20, 2026
- RHSA-2024:1227 Red Hat Security Advisory: openvswitch3.1 security update Red Hat Security Advisories (RHSA) · Sep 20, 2026
- RHBA-2024:1226 Red Hat Bug Fix Advisory: openvswitch2.17 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHBA-2024:1228 Red Hat Bug Fix Advisory: openvswitch3.2 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-6690-1 openvswitch vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-6514-1 openvswitch vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2026:20061-1 Security update for openvswitch SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20049-1 Security update for openvswitch SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0290-1 Security update for openvswitch3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0280-1 Security update for openvswitch SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5640-1 openvswitch - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3734-1 openvswitch - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2023:4571-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4657-1 Security update for openvswitch3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4666-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4661-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4714-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13657-1 libopenvswitch-3_1-0-3.1.0-18.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4508-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4573-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://access.redhat.com/security/cve/CVE-2023-5366 vdb-entry
- RHBZ#2006347 issue-tracking
- http://www.openwall.com/lists/oss-security/2024/02/08/4
- https://lists.debian.org/debian-lts-announce/2024/02/msg00004.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYYUBF6OW2JG7VOFEOROHXGSJCTES3QO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFZADABUDOFI2KZIRQBYFZCIKH55RGY3/