CVE-2026-74464
Received Received - Intake

Linux Kernel sk_buff Leak in Open vSwitch

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix skb leak on flow key update failure during ct ovs_ct_execute() always steals or frees the skb on failure while ovs_flow_key_update() does not. So, if it fails and we return right away, the skb ends up leaked. Fix that by breaking instead and letting the common error handling code at the bottom of the loop to free the skb properly. This is a very unlikely scenario as it requires the packet to become unparseable by applying a set of actions on a previously parseable skb, but should be fixed nevertheless. Reported by Sashiko.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74464
EUVD
EUVD-2026-59657

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openvswitch openvswitch *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a skb (socket buffer) leak in the Open vSwitch connection tracking (CT) module. When updating flow keys during CT processing fails, the skb is not properly freed, leading to a memory leak. The issue occurs in ovs_ct_execute() when ovs_flow_key_update() fails, causing the skb to be leaked if the function returns immediately.

Detection Guidance

This vulnerability involves a skb leak in the Linux kernel's Open vSwitch module during flow key update failures. Detection requires checking kernel logs for OVS-related errors or skb leaks. Monitor dmesg or syslog for messages like 'skbuff leak' or 'OVS flow key update failed'. Use commands like 'dmesg | grep -i ovs' or 'journalctl -k | grep -i skb' to search for anomalies.

Impact Analysis

This vulnerability could lead to memory exhaustion on systems running Open vSwitch with connection tracking enabled. Over time, unchecked skb leaks may cause the system to run out of memory, potentially leading to crashes or degraded performance. However, the scenario is unlikely as it requires specific conditions to trigger.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Update Open vSwitch to the latest stable version. Restart affected services or reboot the system to ensure the patched kernel is active. Monitor network traffic and system logs for any signs of exploitation or continued issues.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74464. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart