Red Hat Fast Datapath for RHEL 9
23 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-86849 | | Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto | MEDIUM 6.5 | 0.1 % | ||
| CVE-2026-86856 | | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86847 | | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86846 | | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86845 | | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86566 | | Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-86848 | | Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto | HIGH 8.8 | 0.1 % | ||
| CVE-2026-86567 | | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap | HIGH 8.8 | 0.1 % | ||
| CVE-2026-100236 | | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | HIGH 8.6 | 0.3 % | ||
| CVE-2026-86565 | | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write | HIGH 8.2 | 0.2 % | ||
| CVE-2026-86563 | | Dpdk: dpdk: double offset bug in vhost log mapping calculation | HIGH 7.8 | 0.2 % | ||
| CVE-2026-86562 | | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) | HIGH 7.8 | 0.2 % | ||
| CVE-2026-86561 | | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-93683 | | Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-86564 | | Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler | LOW 3.3 | 0.1 % | ||
| CVE-2026-34956 | | Openvswitch: open vswitch: denial of service via malformed ftp epasv command | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-5265 | | Ovn: ovn: heap over-read in icmp error response generation | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-5367 | | Ovn: ovn: information disclosure via crafted dhcpv6 packets | HIGH 8.6 | 0.9 % | ||
| CVE-2024-11614 | | Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library | HIGH 7.4 | 0.6 % | ||
| CVE-2024-2182 | | Ovn: insufficient validation of bfd packets may lead to denial of service | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-3966 | | Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet | HIGH 7.5 | 1.0 % | ||
| CVE-2023-5366 | | Openvswitch don't match packets on nd_target field | HIGH 7.1 | 0.4 % | ||
| CVE-2023-3153 | | Service monitor mac flow is not rate limited | MEDIUM 5.3 | 1.0 % |