CVE-2021-3905: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments.

Affected products

• Canonical Ubuntu Linux: version 21.10 only
• Fedoraproject Fedora: version 35 only
• Openvswitch Openvswitch: before 2.17.0 (fixed in 2.17.0)
• Red Hat Enterprise Linux Fast Datapath: version 7.0 only; version 8.0 only

Published 2022-08-23. Last modified 2026-06-17.