Linux Kernel Vulnerability in Open vSwitch Affecting Multiple Versions

CVE-2025-38146

What is CVE-2025-38146?

A vulnerability in the Linux kernel's Open vSwitch component can lead to a dead loop scenario during MPLS packet parsing if the packet does not end correctly. This issue arises when the label count wraps around due to excessive label stacks, ultimately causing a CPU soft lockup. The flaw can significantly affect system performance, leading to a non-responsive state if exploited effectively. Users are encouraged to update to the latest Open vSwitch versions to mitigate this risk.

References