Ovn: egress acls may be bypassed via specially crafted udp packet

Description

A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP packets may bypass egress access control lists (ACLs) in OVN installations configured with a logical switch with DNS records set on it and if the same switch has any egress ACLs configured. This issue can lead to unauthorized access to virtual machines and containers running on the OVN network.

Timeline

Scores

EPSS (exploitation in 30 days)

0.86% · top 41% of all CVEs (12 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.

Affected products

• ovn

  • unaffected 22.03.8
  • unaffected 24.03.5
  • unaffected 24.09.2

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 8

  • unaffected 0:22.03.7-11.el8fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 8

  • unaffected 0:22.06.0-273.el8fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 8

  • unaffected 0:22.09.2-86.el8fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 8

  • unaffected 0:22.12.1-107.el8fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 8

  • unaffected 0:23.03.3-22.el8fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 8

  • unaffected 0:23.06.4-26.el8fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:22.03.7-11.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:22.06.0-273.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:22.09.2-86.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:22.12.1-107.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:23.03.3-22.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:23.06.4-26.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:23.09.6-12.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:24.03.4-53.el9fdp – < *

• Red Hat · Fast Datapath for Red Hat Enterprise Linux 9

  • unaffected 0:24.09.1-66.el9fdp – < *

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unknown

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unknown

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unknown

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unknown

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: affected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

• Red Hat · Red Hat OpenShift Container Platform 4

  All versions: unaffected

What to do

Workaround: Red Hat Product Security has not identified any mitigations at this time. We recommend updating to a known patched version of OVN.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2025-1804 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2025-0650](https://cveledger.app/badge/CVE-2025-0650.svg)](https://cveledger.app/cve/CVE-2025-0650)

Record last updated 20 Nov 2025, 07:25 UTC.