CVE-2025-38146

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck finally. stack backtrace: UBSAN: array-index-out-of-bounds in /build/linux-0Pa0xK/linux-5.15.0/net/openvswitch/flow.c:662:26 index -1 is out of range for type '__be32 [3]' CPU: 34 PID: 0 Comm: swapper/34 Kdump: loaded Tainted: G OE 5.15.0-121-generic #131-Ubuntu Hardware name: Dell Inc. PowerEdge C...

Affected product and versions

Product

Linux Linux, linux kernel, debian linux

Affected versions

>= fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 < 4b9a086eedc1fddae632310386098c12155e3d0a, >= fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 < ad17eb86d042d72a59fd184ad1adf34f5eb36843, >= fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 < f26fe7c3002516dd3c288f1012786df31f4d89e0, >= fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 < 8ebcd311b4866ab911d1445ead08690e67f0c488, >= fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 < 69541e58323ec3e3904e1fa87a6213961b1f52f4, >= fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 < 3c1906a3d50cb94fd0a10e97a1c0a40c0f033cb7, >= fbdcdd78da7c95f1b970d371e1b23cbd3aa990f3 < 0bdc924bfb319fb10d1113cbf091fc26fb7b1f99, >= 5.5, >= 5.5 < 5.10.239, >= 5.11 < 5.15.186, >= 5.16 < 6.1.142, >= 6.2 < 6.6.94, >= 6.7 < 6.12.34, >= 6.13 < 6.15.3, 11.0

Fixed versions

5.10.239, 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-129