Wind River Support Network

HomeDefectsLIN1022-22825

Acknowledged

LIN1022-22825 : Security Advisory - linux - CVE-2026-31679

Created: Apr 27, 2026 Updated: Apr 30, 2026

Found In Version: 10.22.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  openvswitch: validate MPLS set/set_masked payload length  validate_set() accepted OVS_KEY_ATTR_MPLS as variable-sized payload for SET/SET_MASKED actions. In action handling, OVS expects fixed-size MPLS key data (struct ovs_key_mpls).  Use the already normalized key_len (masked case included) and reject non-matching MPLS action key sizes.  Reject invalid MPLS action payload lengths early.