CVE-2022-4338: Debian Linux

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.

Affected products

• Debian Debian Linux: version 11.0 only
• Openvswitch Openvswitch: before 2.13.10 (fixed in 2.13.10); from 2.14.0, before 2.14.8 (fixed in 2.14.8); from 2.15.0, before 2.15.7 (fixed in 2.15.7); from 2.16.0, before 2.16.6 (fixed in 2.16.6); from 2.17.0, before 2.17.5 (fixed in 2.17.5); from 3.0.0, before 3.0.3 (fixed in 3.0.3)

Published 2023-01-10. Last modified 2026-06-17.