Description

In the Linux kernel, the following vulnerability has been resolved: openvswitch: validate MPLS set/set_masked payload length validate_set() accepted OVS_KEY_ATTR_MPLS as variable-sized payload for SET/SET_MASKED actions. In action handling, OVS expects fixed-size MPLS key data (struct ovs_key_mpls). Use the already normalized key_len (masked case included) and reject non-matching MPLS action key sizes. Reject invalid MPLS action payload lengths early.

Vecteur d'attaque

Complexité : LOW

Privilèges requis : LOW

Interaction utilisateur : NONE

Impact

• Confidentialité : HIGH
• Intégrité : NONE
• Disponibilité : HIGH

Recommandations

Appliquer les correctifs de sécurité fournis par le vendeur dès que possible.