This vulnerability arises from OVN's improper handling of an inflated Client ID length in DHCPv6 SOLICIT packets, which causes the ovn-controller to read beyond the packet bounds. The out-of-bounds read can disclose sensitive information stored in heap memory to a remote attacker. The CVSS v3.1 score is 8.6, reflecting a high-severity remote vulnerability with no required privileges or user interaction and a confidentiality impact rated as high. The vendor advisory does not currently specify any patch or mitigation.

A remote attacker can exploit this vulnerability to read sensitive information from heap memory of the ovn-controller process, potentially leading to information disclosure. The vulnerability does not affect integrity or availability directly but compromises confidentiality. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-5367 for current remediation guidance. Until an official fix is released, consider restricting access to the affected service to trusted networks and monitoring for anomalous DHCPv6 SOLICIT traffic with abnormal Client ID lengths. Do not assume the vulnerability is mitigated without vendor confirmation.