In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink header. Check that the attribute is OK first. CREATE(Triage):(User=admin) CVE-2025-37789 (https://nvd.nist.gov/vuln/detail/CVE-2025-37789)