https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:27:51 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74464 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: openvswitch: fix skb leak on flow key update failure during ct</p> <p>ovs_ct_execute() always steals or frees the skb on failure while ovs_flow_key_update() does not. So, if it fails and we return right away, the skb ends up leaked.</p> <p>Fix that by breaking instead and letting the common error handling code at the bottom of the loop to free the skb properly.</p> <p>This is a very unlikely scenario as it requires the packet to become unparseable by applying a set of actions on a previously parseable skb, but should be fixed nevertheless.</p> <p>Reported by Sashiko.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: openvswitch: fix skb leak on flow key update failure during ct</p> <p>ovs_ct_execute() always steals or frees the skb on failure while ovs_flow_key_update() does not. So, if it fails and we return right away, the skb ends up leaked.</p> <p>Fix that by breaking instead and letting the common error handling code at the bottom of the loop to free the skb properly.</p> <p>This is a very unlikely scenario as it requires the packet to become unparseable by applying a set of actions on a previously parseable skb, but should be fixed nevertheless.</p> <p>Reported by Sashiko.</p> https://vulnerability.circl.lu/vuln/cve-2026-74464