Red Hat Security Advisory

RHSA-2026:22111

ovn25.09 security update

Released 2026-06-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Fast Datapath for Red Hat Enterprise Linux 10 ovn25.09-25.09.2-103.el10fdp, ovn25.09-central-25.09.2-103.el10fdp, ovn25.09-host-25.09.2-103.el10fdp +1

Fixes 2 records

TI-2026-04696 CVE-2026-5367 · GHSA-r8vj-9qgr-m84x

Ovn: ovn: information disclosure via crafted dhcpv6 packets

MEDIUM 45

A flaw was found in OVN (Open Virtual Network).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00868 Published 2026-04-24 Partial fix · 25.03.2-100.el10fdp, 25.09.2-103.el10fdp +7 CWE-130

TI-2026-04600 CVE-2026-5265 · GHSA-whr7-6788-jg2p

Ovn: ovn: heap over-read in icmp error response generation

LOW 30

When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IP…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00629 Published 2026-04-24 Partial fix · 25.03.2-100.el10fdp, 25.09.2-103.el10fdp +7 CWE-130