Back Linuxsecurity openSUSE 15.6 openvswitch Critical DoS Memory Access Vulnerability Alert
This update for openvswitch fixes the following issues: Update to v3.1.7: * CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465). * CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435). * CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054). * CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125). * CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-280=1 openSUSE-SLE-15.6-2026-280=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-280=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-280=1
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch SUSE-2026-280=1 openSUSE-SLE-15.6-2026-280=1
* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-280=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-280=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * openvswitch-ipsec-3.1.7-150600.33.9.1 * openvswitch-pki-3.1.7-150600.33.9.1 * ovn-23.03.3-150600.33.9.1 * ovn-vtep-23.03.3-150600.33.9.1 * ovn-host-debuginfo-23.03.3-150600.33.9.1 * libovn-23_03-0-23.03.3-150600.33.9.1 * ovn-host-23.03.3-150600.33.9.1 * ovn-vtep-debuginfo-23.03.3-150600.33.9.1 * openvswitch-test-debuginfo-3.1.7-150600.33.9.1 * ovn-central-23.03.3-150600.33.9.1 * openvswitch-3.1.7-150600.33.9.1 * ovn-docker-23.03.3-150600.33.9.1 * ovn-devel-23.03.3-150600.33.9.1 * ovn-debuginfo-23.03.3-150600.33.9.1 * libopenvswitch-3_1-0-3.1.7-150600.33.9.1 * openvswitch-debugsource-3.1.7-150600.33.9.1 * openvswitch-test-3.1.7-150600.33.9.1 * openvswitch-vtep-debuginfo-3.1.7-150600.33.9.1 * openvswitch-vtep-3.1.7-150600.33.9.1 * ovn-central-debuginfo-23.03.3-150600.33.9.1 * libovn-23_03-0-debuginfo-23.03.3-150600.33.9.1 * Read the Full Advisory
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
* openvswitch-ipsec-3.1.7-150600.33.9.1
* openvswitch-pki-3.1.7-150600.33.9.1
* ovn-23.03.3-150600.33.9.1
* ovn-vtep-23.03.3-150600.33.9.1
* ovn-host-debuginfo-23.03.3-150600.33.9.1
* libovn-23_03-0-23.03.3-150600.33.9.1
* ovn-host-23.03.3-150600.33.9.1
* ovn-vtep-debuginfo-23.03.3-150600.33.9.1
* openvswitch-test-debuginfo-3.1.7-150600.33.9.1
* ovn-central-23.03.3-150600.33.9.1
* openvswitch-3.1.7-150600.33.9.1
* ovn-docker-23.03.3-150600.33.9.1
* ovn-devel-23.03.3-150600.33.9.1
* ovn-debuginfo-23.03.3-150600.33.9.1
* libopenvswitch-3_1-0-3.1.7-150600.33.9.1
* openvswitch-debugsource-3.1.7-150600.33.9.1
* openvswitch-test-3.1.7-150600.33.9.1
* openvswitch-vtep-debuginfo-3.1.7-150600.33.9.1
* openvswitch-vtep-3.1.7-150600.33.9.1
* ovn-central-debuginfo-23.03.3-150600.33.9.1
* libovn-23_03-0-debuginfo-23.03.3-150600.33.9.1
* bsc#1210054 * bsc#1212125 * bsc#1216002 * bsc#1219465 * bsc#1255435 ## References: * * * * * * * * * * * *
*
*
*
*
*
*
*
*
*
*
*
*
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
