High 7.8Published May 29, 2025

CVE-2025-37998openvswitch: Fix unsafe attribute parsing in output_userspace()

Updated under an hour ago (Oct 27, 2026, 11:00 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attribute iteration in output_userspace() with nla_for_each_nested(), which ensures that only well-formed attributes are processed.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ccb1352e76cff0524e7ccb2074826a092dd13016 before 6712dc21506738f5f22b4f68b7c0d9e0df819dbd; from ccb1352e76cff0524e7ccb2074826a092dd13016 before 06b4f110c79716c181a8c5da007c259807840232; from ccb1352e76cff0524e7ccb2074826a092dd13016 before 47f7f00cf2fa3137d5c0416ef1a71bdf77901395; from ccb1352e76cff0524e7ccb2074826a092dd13016 before bca8df998cce1fead8cbc69144862eadc2e34c87; from ccb1352e76cff0524e7ccb2074826a092dd13016 before 0236742bd959332181c1fcc41a05b7b709180501; from ccb1352e76cff0524e7ccb2074826a092dd13016 before ec334aaab74705cc515205e1da3cb369fdfd93cd; from ccb1352e76cff0524e7ccb2074826a092dd13016 before 4fa672cbce9c86c3efb8621df1ae580d47813430; from ccb1352e76cff0524e7ccb2074826a092dd13016 before 6beb6835c1fbb3f676aebb51a5fee6b77fed9308	CNA record
linux linux_kernel linux:linux_kernel	from 3.3 before 5.4.294; from 5.5 before 5.10.238; from 5.11 before 5.15.183; from 5.16 before 6.1.139; from 6.2 before 6.6.91; from 6.7 before 6.12.29; from 6.13 before 6.14.7; 6.15; and 4 more ranges	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/6712dc21506738f5f22b4f68b7c0d9e0df819dbd	patch
https://git.kernel.org/stable/c/06b4f110c79716c181a8c5da007c259807840232	patch
https://git.kernel.org/stable/c/47f7f00cf2fa3137d5c0416ef1a71bdf77901395	patch
https://git.kernel.org/stable/c/bca8df998cce1fead8cbc69144862eadc2e34c87	patch
https://git.kernel.org/stable/c/0236742bd959332181c1fcc41a05b7b709180501	patch
https://git.kernel.org/stable/c/ec334aaab74705cc515205e1da3cb369fdfd93cd	patch
https://git.kernel.org/stable/c/4fa672cbce9c86c3efb8621df1ae580d47813430	patch
https://git.kernel.org/stable/c/6beb6835c1fbb3f676aebb51a5fee6b77fed9308	patch
https://www.zerodayinitiative.com/advisories/ZDI-25-307/	third-party-advisory
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html	third-party-advisory
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.