Network Device Management Flaw in Open vSwitch by Linux Foundation

CVE-2026-31508

What is CVE-2026-31508?

A vulnerability has been identified in Open vSwitch, which impacts the Linux kernel's handling of network devices. This flaw occurs during the unregistration process of OVS ports, where improper sequence handling may lead to potential system crashes. Specifically, if the flag IFF_OVS_DATAPATH is cleared and the process is preempted before full unregistration, the destruction of the network device can complete prematurely, causing a general protection fault. The kernel's runtime may invoke unstable behavior, resulting in a system crash or compromise. Users of affected Open vSwitch versions should update their installations promptly to avoid potential exploitation.

References