OVN Security Alert: Critical Heap Over-Read Flaws Risk Sensitive Data Leaks

The OVN team disclosed two critical heap over-read vulnerabilities (CVE-2026-5265 and CVE-2026-5367) where crafted ICMP or DHCPv6 packets can cause ovn-controller to read and return adjacent heap memory in replies, enabling information disclosure from virtualized environments; patches are available for OVN 24.03+ and workarounds exist but may disrupt legitimate traffic.