---
id: CVE-2022-37394
aliases:
  - GHSA-v725-c588-h936
  - PYSEC-2026-882
title: OpenStack Nova Changing vnic_type breaks compute service restart
summary: OpenStack Nova Changing vnic_type breaks compute service restart
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'
vendor: nova
product: nova
ecosystem: pip
affected:
  - nova < 23.2.2
  - 'nova >= 24.0.0, < 24.1.2'
  - 'nova >= 25.0.0, < 25.0.2'
patched:
  - nova 23.2.2
  - nova 24.1.2
  - nova 25.0.2
published: '2022-08-04'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-v725-c588-h936'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2022-37394'
  - url: >-
      https://github.com/openstack/nova/commit/0c87681135cfb3ce61d2a0392928c1dbc1fe5fde
  - url: >-
      https://github.com/openstack/nova/commit/1a98a1a650d065a8ab3e1c474f3b9fd537dc2206
  - url: >-
      https://github.com/openstack/nova/commit/4954f993680c75fd9d3d507f2dcd00300c9b3d44
  - url: >-
      https://github.com/openstack/nova/commit/a28c82719545d5c8ee7f3ff1361b3a796e05095a
  - url: >-
      https://github.com/openstack/nova/commit/e43bf900dc8ca66578603bed333c56b215b1876e
  - url: >-
      https://github.com/openstack/nova/commit/f8c91eb75fc5504a37fc3b4be1d65d33dbc9b511
  - url: 'https://bugs.launchpad.net/ossa/+bug/1981813'
  - url: 'https://github.com/openstack/nova'
  - url: 'https://review.opendev.org/c/openstack/nova/+/849985'
  - url: 'https://review.opendev.org/c/openstack/nova/+/850003'
tags:
  - osv
  - pip
epss: 0.00309
epssPercentile: 0.23885
ingestedAt: '2026-07-08T18:25:53.111Z'
---

## Overview

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnic_type, creating an instance bound to that port, and then changing the vnic_type of the bound port to macvtap, an authenticated user may cause the compute service to fail to restart, resulting in a possible denial of service. Only Nova deployments configured with SR-IOV are affected.

## Affected packages

- `nova < 23.2.2`
- `nova >= 24.0.0, < 24.1.2`
- `nova >= 25.0.0, < 25.0.2`

## Remediation

Upgrade to a patched release:

- `nova 23.2.2`
- `nova 24.1.2`
- `nova 25.0.2`