Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-74464

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/08/2026
Última modificación:
15/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: openvswitch: fix skb leak on flow key update failure during ct<br /> <br /> ovs_ct_execute() always steals or frees the skb on failure while<br /> ovs_flow_key_update() does not. So, if it fails and we return right<br /> away, the skb ends up leaked.<br /> <br /> Fix that by breaking instead and letting the common error handling<br /> code at the bottom of the loop to free the skb properly.<br /> <br /> This is a very unlikely scenario as it requires the packet to become<br /> unparseable by applying a set of actions on a previously parseable skb,<br /> but should be fixed nevertheless.<br /> <br /> Reported by Sashiko.

Impacto