Skip to main content

CRE-2025-0040

Neutron Open Virtual Network (OVN) fails to bind logical switch due to race condition during load balancer creationLow
Impact: 6/10
Mitigation: 4/10

CRE-2025-0040View on GitHub

Description

During load balancer creation or other operations involving logical router and logical switch associations, Neutron OVN may raise a `RowNotFound` exception when attempting to reference a logical switch that has just been deleted. This leads to a port binding failure and a rollback of the affected operation.

Mitigation

- Apply upstream Neutron fix (see Launchpad bug 1963921). - Patch Neutron to include retry logic for logical switch to load balancer associations. - Reduce concurrent subnet operations during load balancer provisioning. - Use Neutron commits with split transactions to allow partial recovery in failure cases.

References