openvswitch (SUSE:Linux Micro 6.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Micro 6.0 package openvswitch, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2026-5367 — CVSS 8.6 (high): A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6)…
• CVE-2025-0650 — CVSS 8.1 (high): A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN…
• CVE-2023-3966 — CVSS 7.5 (high): A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service…
• CVE-2023-5366 — CVSS 7.1 (high): A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This…
• CVE-2024-2182 — CVSS 6.5 (medium): A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an…
• CVE-2026-5265 — CVSS 6.5 (medium): When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the…
• CVE-2026-34956 — CVSS 5.9 (medium): A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a…