Skip to contentRed Hat Fast Datapath For Rhel 9 vulnerabilities
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-cryptoCVE-2026-86849Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: stack and heap buffer overflow in nfp vdpa driverCVE-2026-86856Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanupCVE-2026-86847Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-cryptoCVE-2026-86846Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanupCVE-2026-86845Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)CVE-2026-86566Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-cryptoCVE-2026-86848Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmapCVE-2026-86567Fix available8.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: heap out-of-bounds read/write in gso header copyCVE-2026-100236Fix available8.6 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds writeCVE-2026-86565Fix available8.2 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: double offset bug in vhost log mapping calculationCVE-2026-86563Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)CVE-2026-86562Fix available7.8 High
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: missing memory size validation before mmap in vhost memory region setupCVE-2026-86561Fix available6.5 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +5 more +7 moreDpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctouCVE-2026-93683Fix available6.4 Medium
- red hat fast datapath for rhel 10, fast datapath for rhel 8, fast datapath for rhel 9 +4 more +6 moreDpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handlerCVE-2026-86564Fix available3.3 Low
- red hat fast datapath for red hat enterprise linux 10, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +3 more +5 moreOvn: ovn: information disclosure via crafted dhcpv6 packetsCVE-2026-53678.6 High
- red hat fast datapath for red hat enterprise linux 10, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +3 more +5 moreOvn: ovn: heap over-read in icmp error response generationCVE-2026-52656.5 Medium
- red hat fast datapath for rhel 7, fast datapath for rhel 8, fast datapath for rhel 9 +6 more +8 moreOpenvswitch: open vswitch: denial of service via malformed ftp epasv commandCVE-2026-34956Fix available5.9 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +12 more +14 moreDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryCVE-2024-11614Fix available7.4 High
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 10 +5 more +7 moreOvn: insufficient validation of bfd packets may lead to denial of serviceCVE-2024-2182Fix available6.5 Medium
- fedora, openvswitch, rdo openstack rdo +5 more +7 moreOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetCVE-2023-3966Fix available7.5 High
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target fieldCVE-2023-5366Fix available7.1 High
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limitedCVE-2023-3153Fix available5.3 Medium