A missing upper‑bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to request an excessive number of handler or revalidation threads, leading to resource exhaustion and a denial of service. The vulnerability is a clear example of a resource exhaustion flaw where an unverified input value directly controls system resource allocation. The resulting denial of service can render the Open vSwitch instance unresponsive, affecting network traffic handling.

The vulnerability affects Open vSwitch version 3.6.90. No other versions or vendor products are listed.

The CVSS score of 6.5 indicates moderate severity; the EPSS score is unavailable, but the exploit is feasible if the attacker has OVSDB write permissions. Because the flaw is unconditionally granted to any OVSDB writer, the risk level is moderate to high in environments where this access is not tightly controlled. The issue is not listed in CISA’s KEV catalog, and no active public exploit is reported; however, the lack of an upper bound can cause a local or remote denial of service depending on how the OVSDB interface is exposed.