FD
Product
Fast Datapath for RHEL 10
16
CVEs
0
On KEV
8.8
Max CVSS
14
New 30D
Severity mix
Critical 0High 6Medium 9Low 1
Watch
Add Fast Datapath for RHEL 10 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86848 | 8.8 | Oct 14 | Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86567 | 8.8 | Oct 14 | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap Affected: All versions, or not specified |
| CVE-2026-100236 | 8.6 | Oct 14 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy Affected: All versions, or not specified |
| CVE-2026-86565 | 8.2 | Oct 14 | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write Affected: All versions, or not specified |
| CVE-2026-86563 | 7.8 | Oct 14 | Dpdk: dpdk: double offset bug in vhost log mapping calculation Affected: All versions, or not specified |
| CVE-2026-86562 | 7.8 | Oct 14 | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) Affected: All versions, or not specified |
| CVE-2026-86849 | 6.5 | Oct 14 | Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86856 | 6.5 | Oct 14 | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver Affected: All versions, or not specified |
| CVE-2026-86847 | 6.5 | Oct 14 | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup Affected: All versions, or not specified |
| CVE-2026-86846 | 6.5 | Oct 14 | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86845 | 6.5 | Oct 14 | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup Affected: All versions, or not specified |
| CVE-2026-86566 | 6.5 | Oct 14 | Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) Affected: All versions, or not specified |
| CVE-2026-86561 | 6.5 | Oct 14 | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup Affected: All versions, or not specified |
| CVE-2024-2182 | 6.5 | Mar 12 | Ovn: insufficient validation of bfd packets may lead to denial of service Affected: All versions, or not specified |
| CVE-2026-93683 | 6.4 | Oct 14 | Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou Affected: All versions, or not specified |
| CVE-2026-86564 | 3.3 | Sep 8 | Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler Affected: All versions, or not specified |
Showing 16
