Description
A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ovn | 20.03.0 | — |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Fast Datapath for RHEL 10 | — | — |
| Red Hat | Fast Datapath for RHEL 7 | — | — |
| Red Hat | Fast Datapath for RHEL 8 | — | — |
| Red Hat | Fast Datapath for RHEL 9 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat OpenStack Platform 13 (Queens) | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | ovn | 24.03.1-1 | — |
| Debian 12 | ovn | 23.03.1-1~deb12u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | ovn | 22.03.3-0ubuntu0.22.04.2 | USN-6691-1 |
| Ubuntu 20.04 LTS | ovn | 20.03.2-0ubuntu0.20.04.5 | USN-6691-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | ovn22.03 +3 | 22.03.3-71.el9fdp | RHSA-2024:1393 |
| RHEL 9 | ovn22.12 +3 | 22.12.1-94.el9fdp | RHSA-2024:1392 |
| RHEL 9 | ovn23.03 +3 | 23.03.1-100.el9fdp | RHSA-2024:1394 |
| RHEL 9 | ovn23.06 +3 | 23.06.1-112.el9fdp | RHSA-2024:1391 |
| RHEL 9 | ovn23.09 +3 | 23.09.0-136.el9fdp | RHSA-2024:1390 |
| RHEL 8 | ovn-2021 +3 | 21.12.0-142.el8fdp | RHSA-2024:4035 |
| RHEL 8 | ovn22.03 +3 | 22.03.3-71.el8fdp | RHSA-2024:1387 |
| RHEL 8 | ovn22.12 +3 | 22.12.1-94.el8fdp | RHSA-2024:1386 |
| RHEL 8 | ovn23.03 +3 | 23.03.1-100.el8fdp | RHSA-2024:1388 |
| RHEL 8 | ovn23.06 +3 | 23.06.1-112.el8fdp | RHSA-2024:1385 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | openvswitch | 3.1.7-150600.33.9.1 | SUSE-SU-2026:0280-1 |
| SLES 15 SP5 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
| SLES 12 SP5 | openvswitch | 2.11.5-3.27.1 | SUSE-SU-2026:0619-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | openvswitch | 3.1.7-150600.33.9.1 | SUSE-SU-2026:0280-1 |
| SLES for SAP 15 SP5 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
| SLE Micro 6.1 | openvswitch | 3.1.7-slfo.1.1_2.1 | SUSE-SU-2026:20061-1 |
| SLE Micro 6.0 | openvswitch | 3.1.7-4.1 | SUSE-SU-2026:20049-1 |
| SLE Micro 5.5 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
| SLE HPC 15 SP5 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | openvswitch | 3.1.7-150600.33.9.1 | SUSE-SU-2026:0280-1 |
| openSUSE Leap 15.6 | openvswitch3 | 3.1.7-150500.3.25.1 | SUSE-SU-2026:0290-1 |
Advisories 17
- RHSA-2024:4035 Red Hat Security Advisory: ovn-2021 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1394 Red Hat Security Advisory: ovn23.03 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1393 Red Hat Security Advisory: ovn22.03 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1392 Red Hat Security Advisory: ovn22.12 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1391 Red Hat Security Advisory: ovn23.06 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1388 Red Hat Security Advisory: ovn23.03 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1390 Red Hat Security Advisory: ovn23.09 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1387 Red Hat Security Advisory: ovn22.03 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1385 Red Hat Security Advisory: ovn23.06 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:1386 Red Hat Security Advisory: ovn22.12 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- SUSE-SU-2026:20061-1 Security update for openvswitch SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20049-1 Security update for openvswitch SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0290-1 Security update for openvswitch3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0280-1 Security update for openvswitch SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0619-1 Security update for openvswitch SUSE / openSUSE Security Updates · Feb 26, 2026
- USN-6691-1 ovn vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- WID-SEC-2024-0664 Red Hat Enterprise Linux: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 26, 2026
References
- RHSA-2024:1385 vendor-advisory
- RHSA-2024:1386 vendor-advisory
- RHSA-2024:1387 vendor-advisory
- RHSA-2024:1388 vendor-advisory
- RHSA-2024:1390 vendor-advisory
- RHSA-2024:1391 vendor-advisory
- RHSA-2024:1392 vendor-advisory
- RHSA-2024:1393 vendor-advisory
- RHSA-2024:1394 vendor-advisory
- RHSA-2024:4035 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-2182 vdb-entry
- RHBZ#2267840 issue-tracking
- https://mail.openvswitch.org/pipermail/ovs-announce/2024-March/000346.html
- https://www.openwall.com/lists/oss-security/2024/03/12/5