CVE-2021-36980: Openvswitch

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.

Affected products

• Openvswitch Openvswitch: from 2.11.0, up to and including 2.15.0

Published 2021-07-20. Last modified 2026-06-17.