TI-2026-04600 CVE-2026-5265 · GHSA-whr7-6788-jg2p
Ovn: ovn: heap over-read in icmp error response generation
Priority LOW 30
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IP…