VDB
KO
LOW 3.3

GHSA-v725-c588-h936

OpenStack Nova Changing vnic_type breaks compute service restart

Details

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_type, creating an instance bound to that port, and then changing the vnic_type of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / nova
Introduced in: 0 Fixed in: 23.2.2
Fix pip install --upgrade 'nova>=23.2.2'
PyPI / nova
Introduced in: 24.0.0 Fixed in: 24.1.2
Fix pip install --upgrade 'nova>=24.1.2'
PyPI / nova
Introduced in: 25.0.0 Fixed in: 25.0.2
Fix pip install --upgrade 'nova>=25.0.2'

References