CVE-2026-34956
Fixed in a distro release EPSS <1%CVSS 5.9
A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.
Products: Red Hat Fast Datapath for RHEL 7, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4, Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvswitch | no fix |
| Debian 13 | openvswitch | no fix |
| Debian 14 | openvswitch | 3.7.1-1 |
| SUSE Linux Enterprise Micro 5.5 | openvswitch3 | 3.1.7-150500.3.28.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | openvswitch | 3.5.4-150700.41.15.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP7 | openvswitch | 3.5.4-150700.41.15.1 |
| SUSE Linux Enterprise Server 16.0 | openvswitch | 3.5.4-160000.4.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | openvswitch | 2.11.5-3.30.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | openvswitch | 3.5.4-160000.4.1 |
| SUSE Linux Micro 6.0 | openvswitch | 3.1.7-5.1 |
| SUSE Linux Micro 6.1 | openvswitch | 3.1.7-slfo.1.1_3.1 |
| SUSE Linux Micro 6.2 | openvswitch | 3.5.4-160000.4.1 |
| Ubuntu 20.04 LTS | openvswitch | no fix |
| Ubuntu 22.04 LTS | openvswitch | no fix |
| Ubuntu 24.04 LTS | openvswitch | no fix |
| Ubuntu 25.10 | openvswitch | no fix |
| Ubuntu 26.04 LTS | openvswitch | no fix |
| Ubuntu Pro 18.04 LTS | openvswitch | no fix |
| openSUSE Leap 16.0 | openvswitch | 3.5.4-160000.4.1 |
| openSUSE Tumbleweed | openvswitch | 3.7.1-33.1 |