p PatchFirst

CVE-2022-37394

CVE-2022-37394

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_type, creating an instance bound to that port, and then changing the vnic_type of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.

CVSS 3.3 · Low · EPSS 0.3% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nova Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:26.0.0~rc1-3

    Update to 2:26.0.0~rc1-3

  • nova Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:26.0.0~rc1-3

    Update to 2:26.0.0~rc1-3

  • nova Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:26.0.0~rc1-3

    Update to 2:26.0.0~rc1-3

  • nova PyPI

    Versions
    • 15.1.5
    • 16.1.6
    • 16.1.7
    • 16.1.8
    • 17.0.10
    • 17.0.11
    • 17.0.12
    • 17.0.13
    • 17.0.7
    • 17.0.8
    • 17.0.9
    • 18.0.2
    • 18.0.3
    • 18.1.0
    • 18.2.0
    • 18.2.1
    • 18.2.2
    • 18.2.3
    • 18.3.0
    • 19.0.0
    • 19.0.0.0rc1
    • 19.0.0.0rc2
    • 19.0.1
    • 19.0.2
    • 19.0.3
    • 19.1.0
    • 19.2.0
    • 19.3.0
    • 19.3.1
    • 19.3.2
    • 20.0.0
    • 20.0.0.0rc1
    • 20.0.0.0rc2
    • 20.0.1
    • 20.1.0
    • 20.1.1
    • 20.2.0
    • 20.3.0
    • 20.4.0
    • 20.4.1
    • 20.5.0
    • 20.6.0
    • 20.6.1
    • 21.0.0
    • 21.0.0.0rc1
    • 21.0.0.0rc2
    • 21.1.0
    • 21.1.1
    • 21.1.2
    • 21.2.0
    • 21.2.1
    • 21.2.2
    • 21.2.3
    • 21.2.4
    • 22.0.0
    • 22.0.0.0rc1
    • 22.0.1
    • 22.1.0
    • 22.2.0
    • 22.2.1
    • 22.2.2
    • 22.3.0
    • 22.4.0
    • 23.0.0
    • 23.0.0.0rc1
    • 23.0.0.0rc2
    • 23.0.1
    • 23.0.2
    • 23.1.0
    • 23.2.0
    • 23.2.1
    Affected ranges
    • ECOSYSTEM: < 23.2.2

    Update to 23.2.2

  • nova PyPI

    Versions
    • 24.0.0
    • 24.1.0
    • 24.1.1
    Affected ranges
    • ECOSYSTEM: ≥ 24.0.0, < 24.1.2

    Update to 24.1.2

  • nova PyPI

    Versions
    • 25.0.0
    • 25.0.1
    Affected ranges
    • ECOSYSTEM: ≥ 25.0.0, < 25.0.2

    Update to 25.0.2

  • nova PyPI

    Versions
    • 15.1.5
    • 16.1.6
    • 16.1.7
    • 16.1.8
    • 17.0.10
    • 17.0.11
    • 17.0.12
    • 17.0.13
    • 17.0.7
    • 17.0.8
    • 17.0.9
    • 18.0.2
    • 18.0.3
    • 18.1.0
    • 18.2.0
    • 18.2.1
    • 18.2.2
    • 18.2.3
    • 18.3.0
    • 19.0.0
    • 19.0.0.0rc1
    • 19.0.0.0rc2
    • 19.0.1
    • 19.0.2
    • 19.0.3
    • 19.1.0
    • 19.2.0
    • 19.3.0
    • 19.3.1
    • 19.3.2
    • 20.0.0
    • 20.0.0.0rc1
    • 20.0.0.0rc2
    • 20.0.1
    • 20.1.0
    • 20.1.1
    • 20.2.0
    • 20.3.0
    • 20.4.0
    • 20.4.1
    • 20.5.0
    • 20.6.0
    • 20.6.1
    • 21.0.0
    • 21.0.0.0rc1
    • 21.0.0.0rc2
    • 21.1.0
    • 21.1.1
    • 21.1.2
    • 21.2.0
    • 21.2.1
    • 21.2.2
    • 21.2.3
    • 21.2.4
    • 22.0.0
    • 22.0.0.0rc1
    • 22.0.1
    • 22.1.0
    • 22.2.0
    • 22.2.1
    • 22.2.2
    • 22.3.0
    • 22.4.0
    • 23.0.0
    • 23.0.0.0rc1
    • 23.0.0.0rc2
    • 23.0.1
    • 23.0.2
    • 23.1.0
    • 23.2.0
    • 23.2.1
    • 24.0.0
    • 24.1.0
    • 24.1.1
    • 25.0.0
    • 25.0.1
    Affected ranges
    • ECOSYSTEM: < 23.2.2 ∪ ≥ 24.0.0, < 24.1.2 ∪ ≥ 25.0.0, < 25.0.2

    Update to 23.2.2; Update to 24.1.2; Update to 25.0.2

  • nova Ubuntu:20.04:LTS

    Versions
    • 2:20.0.0-0ubuntu1
    • 2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1
    • 2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2
    • 2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4
    • 2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5
    • 2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2
    • 2:21.0.0-0ubuntu0.20.04.1
    • 2:21.0.0-0ubuntu0.20.04.2
    • 2:21.1.0-0ubuntu1
    • 2:21.1.1-0ubuntu2
    • 2:21.1.2-0ubuntu1
    • 2:21.2.0-0ubuntu1
    • 2:21.2.1-0ubuntu1
    • 2:21.2.2-0ubuntu1
    • 2:21.2.3-0ubuntu1
    • 2:21.2.4-0ubuntu1
    • 2:21.2.4-0ubuntu2
    • 2:21.2.4-0ubuntu2.1
    Affected ranges
    • ECOSYSTEM: < 2:21.2.4-0ubuntu2.2

    Update to 2:21.2.4-0ubuntu2.2

  • nova Ubuntu:22.04:LTS

    Versions
    • 3:24.0.0-0ubuntu1
    • 3:24.0.0+git2022030310.3f274c65cc-0ubuntu2
    • 3:25.0.0-0ubuntu1
    • 3:25.0.0-0ubuntu1.1
    • 3:25.0.1-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 3:25.1.0-0ubuntu1

    Update to 3:25.1.0-0ubuntu1

Original sources

Check your server →