Machine-written summary
Summary written by Claude Haiku from the source advisory. Not reviewed by a person.
The neutron package (OpenStack networking) is vulnerable in versions before 15.3.3, from 16.0.0 before 16.3.1, and from 17.0.0 before 17.1.1, specifically its default Open vSwitch firewall rules. An attacker who controls a server instance connected to the virtual switch can send crafted packets to impersonate IPv6 addresses of other systems, which may cause denial of service or, in some cases, interception of traffic meant for other destinations. Only deployments using the Open vSwitch driver are affected. Upgrade to 15.3.3, 16.3.1, or 17.1.1 depending on your release line.
Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
No source has published a CVSS score for this record yet.
- CISA KEV Not listed.
- EPSS 0.010, the 64th percentile, on 11 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.