This vulnerability arises from a buffer copy operation in Open vSwitch's userspace datapath when handling FTP streams with EPASV commands longer than 255 characters. The unchecked size leads to a heap access error, causing the affected system to crash. The issue is exploitable remotely without authentication but requires high attack complexity. The CVSS 3.1 base score is 5.9, reflecting a medium severity primarily due to the denial of service impact. No known exploits are reported in the wild. The vendor advisory from Red Hat does not currently specify a patch or remediation guidance.

Successful exploitation results in a denial of service condition by crashing the affected system. There is no impact on confidentiality or integrity. The attack vector is network-based with no privileges or user interaction required, but the attack complexity is high. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-34956 for current remediation guidance. Until an official fix is available, consider disabling or restricting the use of FTP helpers in Open vSwitch configurations if feasible to reduce exposure. Monitor Red Hat communications for updates on patches or workarounds.