SUSE-SU-2026:0280-1: openvswitch&distro=openSUSE Leap 15.6
Vulnerability summary
SUSE-SU-2026:0280-1 is a vulnerability in openvswitch&distro=openSUSE Leap 15.6 with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0 · Related 7Timeline
- 23-01-2026PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for openvswitch This update for openvswitch fixes the following issues: Update to v3.1.7: - CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465). - CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435). - CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054). - CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125). - CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- openvswitch&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 3.1.7-150600.33.9.1
- openvswitch&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP6< 3.1.7-150600.33.9.1
Opensuse1 product
- openvswitch&distro=openSUSE Leap 15.6< 3.1.7-150600.33.9.1
2 vendors · 3 products