CRE-2024-0018

Neutron Open Virtual Network (OVN) high CPU usageMedium

Impact: 4/10

Mitigation: 5/10

CRE-2024-0018View on GitHub

Known ProblemOvnPublic

Description

OVN daemons (e.g., ovn-controller) are stuck in a tight poll loop, driving CPU to 100 %. Logs show “Dropped … due to excessive rate” or “Unreasonably long … poll interval,” slowing port-binding and network traffic.

Mitigation

Increase the OVN remote probe interval to 30 seconds: ``` ovs-vsctl set open . external_ids:ovn-remote-probe-interval=30000 ```

References

• https://mail.openvswitch.org/pipermail/ovs-dev/2019-July/361186.html