Linux Kernel Open vSwitch Nested Key Length Validation Vulnerability

A vulnerability in the Linux kernel's Open vSwitch component has been addressed, concerning improper validation of nested key lengths in the 'set()' action. The issue arose because it was unsafe to access the netlink attribute length of the Open vSwitch key if the data was smaller than the netlink header. The vulnerability has been resolved by implementing a proper validation check to ensure the attribute is safe to access.

Impact

Exploitation of this vulnerability could lead to incorrect handling of netlink attributes, potentially causing memory corruption or other unintended behavior in the Open vSwitch component.