CVE-2025-21958 is a medium-severity vulnerability in the Linux kernel related to the Open vSwitch (OVS) conntrack label counting mechanism. The issue arises when the conntrack entry lacks the labels_ext extension, causing a warning due to improper label allocation. This problem became more likely after a commit that switched to per-action label counting. The vulnerability was addressed by reverting the problematic commit to avoid breaking existing use cases.