title: Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
description: A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.
problem types: Uncaught Exception
affected:
{
product: openvswitch
vendor: n/a
versions:
version: 3.1.0, status: unaffected
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.10
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.11
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.12
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.13
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:7::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.11
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.12
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.13
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.15
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.16
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.17
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch3.1
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:8::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch2.17
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch3.0
defaultStatus: unknown
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch3.1
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
}
{
vendor: Red Hat
product: Fast Datapath for RHEL 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch3.2
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:9::fastdatapath
}
{
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:7
}
{
vendor: Red Hat
product: Red Hat OpenShift Container Platform 3.11
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: openvswitch-ovn-kubernetes
defaultStatus: unaffected
cpes: cpe:/a:redhat:openshift:3.11
}
{
product: OpenStack RDO
vendor: RDO
collectionURL: https://repos.fedorapeople.org/repos/openstack/
packageName: rdo-openvswitch
defaultStatus: affected
}
{
product: Fedora
vendor: Fedora
collectionURL: https://packages.fedoraproject.org/
packageName: openvswitch
defaultStatus: affected
}
metrics:
other: [
content: {'value': 'Important', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]