Verified that all needed fixes are present in the latest OCP 4.7.z. Marking this bz as MODIFIED. The bug referenced from the kernel commit above is https://bugzilla.redhat.com/show_bug.cgi?id=1877128 which was Fixed-in-version kernel-4.18.0-254.el8.
Ooops. No, that is not right. While the kernel version is correct, openvswitch2.13-2.13.0-124.el8fdp.x86_64 does not include the fix needed: * Thu Nov 18 2021 Open vSwitch CI <ovs-ci> - 2.13.0-139 - Merging upstream branch-2.13 [RH git: 37c2767bbd] Commit list: 057a5b0708 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation. Since OCP is using openvswitch2.13-2.13.0-124.el8fdp.x86_64, that needs to be updated to 139 still. Re-opening the bz. Sorry about that.
Nope; I was not wrong. :P Since this bz does not depend on bug 1935663 , it is actually accurate to set this as MODIFIED. openvswitch2.13-2.13.0-124.el8fdp.x86_64 includes all that is needed here. In summary, please ignore comments 5 and 6 above. :)
4.7.30 is the first release with the necessary OVS (2.13-117) in the datapath. https://openshift-release.apps.ci.l2s4.p1.openshiftapps.com/releasestream/4-stable/release/4.7.30 https://releases-rhcos-art.cloud.privileged.psi.redhat.com/diff.html?arch=x86_64&first_release=47.84.202109010857-0&first_stream=releases%2Frhcos-4.7&second_release=47.84.202109082139-0&second_stream=releases%2Frhcos-4.7 So this should actually already be fixed in latest 4.7.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.7.39 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:4885