CVE-2025-37998: openvswitch: Fix unsafe attribute parsing in output_userspace()
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: Fix unsafe attribute parsing in outputuserspace()
This patch replaces the manual Netlink attribute iteration in outputuserspace() with nlaforeachnested(), which ensures that only well-formed attributes are processed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37998?
CVE-2025-37998 has been classified as having a medium severity level due to potential exploitation risks.
How do I fix CVE-2025-37998?
To fix CVE-2025-37998, update the Linux kernel or Open vSwitch to the latest version where the vulnerability has been patched.
What software is affected by CVE-2025-37998?
CVE-2025-37998 affects the Linux kernel and Open vSwitch implementations.
Is CVE-2025-37998 exploitable remotely?
CVE-2025-37998 can potentially be exploited locally, as it involves unsafe attribute parsing in specific user-space interactions.
What are the implications of CVE-2025-37998?
The implications of CVE-2025-37998 include possible denial of service or unauthorized access due to incorrect handling of Netlink attributes.