CVE-2022-2639: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

• Linux Linux Kernel: from 3.18.139, before 3.19 (fixed in 3.19); from 4.4.179, before 4.5 (fixed in 4.5); from 4.9.169, before 4.9.312 (fixed in 4.9.312); from 4.14.112, before 4.14.277 (fixed in 4.14.277); from 4.19.35, before 4.19.240 (fixed in 4.19.240); from 5.0.8, before 5.4.191 (fixed in 5.4.191); …
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2022-09-01. Last modified 2026-06-17.