CVE-2026-36499 is a medium-severity vulnerability in Open vSwitch. A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads. This can cause a denial of service (DoS) via resource exhaustion. The vulnerability has a CVSS score of 6.5 and is classified as CWE-770.
A vulnerability in the Linux kernel's openvswitch component can cause a race condition when handling tunnel devices, potentially leading to use-after-free bugs. This issue arises because ovs_netdev_tunnel_destroy() may run after the device has been detached, causing concurrent readers to observe a freed vport->dev. To address this, the reference to vport->dev should be deferred until the RCU release callb [truncated]
