The vulnerability in the Linux kernel's Open vSwitch implementation involves the function ovs_flow_cmd_new() preallocating a reply socket buffer (skb) based on the request's flow identifier before acquiring the ovs_mutex lock and before identifying the actual flow to update. When a request uses a UFID (unique flow identifier) that misses the UFID lookup and falls back to a flow key lookup, the matched flow's identifier may be larger than the preallocated buffer size. This mismatch can cause ovs_flow_cmd_fill_info() to fail with an -EMSGSIZE error and trigger a BUG_ON condition in the kernel update path. The resolution reallocates the reply skb after the correct flow is identified to ensure the buffer is large enough, preventing the kernel bug.

This vulnerability can cause a kernel BUG_ON condition, which leads to a kernel panic or crash when processing certain Open vSwitch flow update requests with mismatched identifiers. This could result in denial of service by crashing the affected system's kernel. There is no indication of code execution or privilege escalation from the provided data.

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to prevent the kernel crash. Since this is a kernel-level issue, upgrading to the fixed kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or kernel mailing list advisories for the exact fixed versions and update accordingly.