CVE-2021-36980

mediumpriority · track · 22EPSS 0.012 · 68 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.18% (68th) EPSS

CVSS 4.3 · medium

Is it mine?

80 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · redhat_csaf

EPSS · scored 2026-10-27

Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixednetwork-scripts-openvswitch2.11-0:2.11.3-86.el8fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixednetwork-scripts-openvswitch2.11-0:2.11.3-86.el8fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixednetwork-scripts-openvswitch2.11-0:2.11.3-86.el8fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-0:2.11.3-86.el8fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-0:2.11.3-86.el8fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-0:2.11.3-86.el8fdp.src as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-0:2.11.3-86.el8fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-debuginfo-0:2.11.3-86.el8fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-debuginfo-0:2.11.3-86.el8fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-debuginfo-0:2.11.3-86.el8fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-debugsource-0:2.11.3-86.el8fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-debugsource-0:2.11.3-86.el8fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-debugsource-0:2.11.3-86.el8fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-devel-0:2.11.3-86.el8fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-devel-0:2.11.3-86.el8fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-devel-0:2.11.3-86.el8fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-test-0:2.11.3-86.el8fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedpython3-openvswitch2.11-0:2.11.3-86.el8fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedpython3-openvswitch2.11-0:2.11.3-86.el8fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedpython3-openvswitch2.11-0:2.11.3-86.el8fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedpython3-openvswitch2.11-debuginfo-0:2.11.3-86.el8fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedpython3-openvswitch2.11-debuginfo-0:2.11.3-86.el8fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedpython3-openvswitch2.11-debuginfo-0:2.11.3-86.el8fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1163
Fixedopenvswitch2.11-0:2.11.3-89.el7fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-0:2.11.3-89.el7fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-0:2.11.3-89.el7fdp.src as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-0:2.11.3-89.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-debuginfo-0:2.11.3-89.el7fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-debuginfo-0:2.11.3-89.el7fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-debuginfo-0:2.11.3-89.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-devel-0:2.11.3-89.el7fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-devel-0:2.11.3-89.el7fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-devel-0:2.11.3-89.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedopenvswitch2.11-test-0:2.11.3-89.el7fdp.noarch as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedpython-openvswitch2.11-0:2.11.3-89.el7fdp.ppc64le as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedpython-openvswitch2.11-0:2.11.3-89.el7fdp.s390x as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166
Fixedpython-openvswitch2.11-0:2.11.3-89.el7fdp.x86_64 as a component of Fast Datapath for Red Hat Enterprise Linux 7redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Users of openvswitch2.11 are advised to upgrade to these updated packages, which fix these bugs.
https://access.redhat.com/errata/RHBA-2021:1166

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–8.6

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 3.6

v3.18.6highAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · FSTEC (BDU) RU

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondaryexploitability 1.8 · impact 3.6

v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-416USprimaryCWE-416USCWE-416US

affected products (80)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Canonical Ltd. Ubuntu≤ 20.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 21.04fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.4fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.3fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP1fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP3fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP3fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP5fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP3fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP2fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP1fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP4fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP4-ESPOSfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP4-LTSSfstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 15 SP4fstec_bduRU

showing 20 of 80

advisories (2)

Vendor and ecosystem advisories describing this.

RHBA-2021:1163Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update2021-04-12csaf · redhat_csafUS
An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 8.
RHBA-2021:1166Red Hat Bug Fix Advisory: openvswitch2.11 bug fix and enhancement update2021-04-12csaf · redhat_csafUS
An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 7.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu redhat_csaf NVD CVE.org MITRE

published 2021-07-20modified 2026-06-17

related (12,285)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-109619US	high8.1OT critical	100.0% (100th)	KEV	2026-10-21
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The g…
CVE-2026-109618US	critical9.8OT critical	100.0% (100th)	KEV	2026-10-21
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave…
CVE-2026-68820US	—OT critical	0.33% (26th)	KEV	2026-08-11
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-5281US	—OT critical	13.5% (96th)	KEV	2026-04-01
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page…
CVE-2026-2441US	high8.8OT critical	55.0% (99th)	KEV	2026-02-13
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever…

+12280 more

references (39)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan