CVE-2026-36499
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an...
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
- Record
CVE-2026-36499- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
EUVDEUVD-2026-34317
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
- Record
EUVD-2026-34317- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-87x4-f37w-27p2
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an...
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
- Record
GHSA-87x4-f37w-27p2- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
NVD
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
- Record
CVE-2026-36499- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-770
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-36499
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
- Record
DEBIAN-CVE-2026-36499- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-36499
A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion.
- Record
UBUNTU-CVE-2026-36499- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvswitchDebian:12 |
All versions, plus listed versions 3.1.0-23.1.0-2+deb12u13.1.2-13.1.2-23.1.2-3 Show 33 moreShow less3.1.2-43.2.0-13.2.0-23.2.2~git20231029-13.2.2~git20231029-23.3.0-13.3.0-23.3.0-33.3.0-43.3.0-53.3.0~git20240118.e802fe7-13.3.0~git20240118.e802fe7-23.3.0~git20240118.e802fe7-33.3.1-13.4.0-13.5.0-13.5.0~git20241129.2af7cef-13.5.0~git20241129.2af7cef-23.6.0-13.6.0-23.6.0-33.6.0-53.6.0-63.6.0-73.7.0-13.7.0~git20260211.8c6ebf8-1~1.gbp9127d13.7.0~git20260211.8c6ebf8-1~1.gbp9127d23.7.0~git20260211.8c6ebf8-1~1.gbp9127d33.7.1-13.7.1-23.7.1-34.0.0-14.0.0-2 |
None known |
openvswitchDebian:13 |
All versions, plus listed versions 3.5.0-13.6.0-13.6.0-23.6.0-33.6.0-5 Show 11 moreShow less3.6.0-63.6.0-73.7.0-13.7.0~git20260211.8c6ebf8-1~1.gbp9127d13.7.0~git20260211.8c6ebf8-1~1.gbp9127d23.7.0~git20260211.8c6ebf8-1~1.gbp9127d33.7.1-13.7.1-23.7.1-34.0.0-14.0.0-2 |
None known |
openvswitchDebian:14 |
All versions, plus listed versions 3.5.0-13.6.0-13.6.0-23.6.0-33.6.0-5 Show 11 moreShow less3.6.0-63.6.0-73.7.0-13.7.0~git20260211.8c6ebf8-1~1.gbp9127d13.7.0~git20260211.8c6ebf8-1~1.gbp9127d23.7.0~git20260211.8c6ebf8-1~1.gbp9127d33.7.1-13.7.1-23.7.1-34.0.0-14.0.0-2 |
None known |
openvswitchUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.4.0-0ubuntu42.4.0-0ubuntu52.5.0~git20160129.46a88d9-0ubuntu12.5.0~git20160219.522aca6-0ubuntu12.5.0~git20160219.522aca6-0ubuntu2 Show 11 moreShow less2.5.0~git20160219.522aca6-0ubuntu32.5.0-0ubuntu12.5.2-0ubuntu0.16.04.12.5.2-0ubuntu0.16.04.22.5.2-0ubuntu0.16.04.32.5.4-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.12.5.5-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.22.5.9-0ubuntu0.16.04.32.5.9-0ubuntu0.16.04.3+esm1 |
None known |
openvswitchUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.8.0-0ubuntu22.8.1-0ubuntu22.8.1-0ubuntu32.9.0~git20180205.5a39582ca-0ubuntu12.9.0-0ubuntu1 Show 9 moreShow less2.9.2-0ubuntu0.18.04.22.9.2-0ubuntu0.18.04.32.9.5-0ubuntu0.18.04.12.9.7-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.22.9.8-0ubuntu0.18.04.32.9.8-0ubuntu0.18.04.42.9.8-0ubuntu0.18.04.52.9.8-0ubuntu0.18.04.5+esm1 |
None known |
openvswitchUbuntu:20.04:LTS |
All versions, plus listed versions 2.12.0-0ubuntu12.12.0-0ubuntu22.12.1~git20191107.7accd1302-0ubuntu12.12.90~git20200107.af683565b-0ubuntu12.12.90~git20200107.af683565b-0ubuntu2 Show 16 moreShow less2.12.90~git20200107.af683565b-0ubuntu32.13.0~git20200127.dbdf66c29-0ubuntu22.13.0~git20200212.15ae9db33-0ubuntu12.13.0~git20200212.15ae9db33-0ubuntu22.13.0-0ubuntu12.13.1-0ubuntu0.20.04.12.13.1-0ubuntu0.20.04.32.13.1-0ubuntu0.20.04.42.13.3-0ubuntu0.20.04.12.13.3-0ubuntu0.20.04.22.13.5-0ubuntu12.13.8-0ubuntu12.13.8-0ubuntu1.12.13.8-0ubuntu1.22.13.8-0ubuntu1.32.13.8-0ubuntu1.4 |
None known |
openvswitchUbuntu:22.04:LTS |
All versions, plus listed versions 2.16.0-0ubuntu22.16.0-0ubuntu32.16.0-0ubuntu42.17.0~git20220105.0d1ffb7-0ubuntu12.17.0~git20220118.1b9fd88-0ubuntu1 Show 12 moreShow less2.17.0~git20220121.109d024-0ubuntu12.17.0-0ubuntu12.17.2-0ubuntu0.22.04.12.17.2-0ubuntu0.22.04.22.17.3-0ubuntu0.22.04.12.17.3-0ubuntu0.22.04.22.17.5-0ubuntu0.22.04.22.17.7-0ubuntu0.22.04.12.17.8-0ubuntu0.22.04.12.17.9-0ubuntu0.22.04.12.17.9-0ubuntu0.22.04.22.17.12-0ubuntu0.22.04.1 |
None known |
openvswitchUbuntu:24.04:LTS |
All versions, plus listed versions 3.2.0-13.2.0-23.2.0-2build13.2.2~git20231029-23.2.2~git20231029-2build1 Show 11 moreShow less3.3.0~git20240118.e802fe7-23.3.0~git20240118.e802fe7-33.3.0-13.3.0-1build13.3.0-1ubuntu13.3.0-1ubuntu33.3.0-1ubuntu3.13.3.0-1ubuntu3.23.3.4-0ubuntu0.24.04.13.3.4-0ubuntu0.24.04.23.3.9-0ubuntu0.24.04.1 |
None known |
openvswitchUbuntu:25.10 |
All versions, plus listed versions 3.5.0-1build13.5.1-0ubuntu13.6.0-13.6.0-23.6.0-2ubuntu0.1 |
None known |
openvswitchUbuntu:26.10 |
All versions, plus listed versions 3.7.1-23.7.1-33.7.1-3build14.0.0-1 |
None known |
openvswitchUbuntu:26.04:LTS |
All versions, plus listed versions 3.6.0-23.6.0-2build13.6.0-53.6.0-63.6.0-6build1 Show 6 moreShow less3.6.0-6ubuntu23.7.0~git20260211.8c6ebf8-1~1.gbp9127d13.7.0-13.7.0-1build13.7.1-13.7.1-2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-36499 is a medium vulnerability (CVSS 6.5) in openvswitch, published June 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.