~ / search / GHSA-v725-c588-h936

GHSA-v725-c588-h936

OpenStack Nova Changing vnic_type breaks compute service restart

Source: GitHub Advisory Database (reviewed) Low CVE-2022-37394

Packages

EcosystemPackageAffectedFixed in
PyPI nova < 23.2.2 23.2.2
PyPI nova >= 24.0.0, < 24.1.2 24.1.2
PyPI nova >= 25.0.0, < 25.0.2 25.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_type, creating an instance bound to that port, and then changing the vnic_type of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.

References

External links from the advisory. They lead to third-party sites.