THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64531 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions lengt

[NVD] CVE-2026-64531 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions lengt

mednvdPublished 2026-07-27

CVE-2026-64531 CVSS: 7.8 HIGH Published: 2026-07-27T08:16:22.243

In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: reject oversized nested action attrs

Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbehaving actions length check") allowed the total sw_flow_actions stream to

Indicators of compromise

CVE-2026-64531cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64531