Threats tagged 'ghsa-f3p5-h83r-f8vf'

A high-severity vulnerability (CVE-2025-37789) in the Linux kernel's Open vSwitch component involves improper validation of nested key lengths in the set() action. The flaw occurs because the code accesses nla_len(ovs_key) without verifying that the data size is sufficient relative to the netlink header, potentially leading to unsafe memory access.