RH
Product
Red Hat OpenStack Platform 13 (Queens)
19
CVEs
0
On KEV
8.8
Max CVSS
14
New 30D
Severity mix
Critical 0High 9Medium 10Low 0
Watch
Add Red Hat OpenStack Platform 13 (Queens) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86848 | 8.8 | Oct 14 | Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86567 | 8.8 | Oct 14 | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap Affected: All versions, or not specified |
| CVE-2026-42999 | 8.8 | May 28 | An issue was discovered in OpenStack Keystone before 29.0.2 Affected: All versions, or not specified |
| CVE-2026-43000 | 8.8 | May 28 | An issue was discovered in OpenStack Keystone before 29.0.2 Affected: All versions, or not specified |
| CVE-2026-100236 | 8.6 | Oct 14 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy Affected: All versions, or not specified |
| CVE-2026-86565 | 8.2 | Oct 14 | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write Affected: All versions, or not specified |
| CVE-2026-81627 | 8.2 | Sep 18 | Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram Affected: All versions, or not specified |
| CVE-2026-86563 | 7.8 | Oct 14 | Dpdk: dpdk: double offset bug in vhost log mapping calculation Affected: All versions, or not specified |
| CVE-2026-86562 | 7.8 | Oct 14 | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) Affected: All versions, or not specified |
| CVE-2026-86849 | 6.5 | Oct 14 | Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86856 | 6.5 | Oct 14 | Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver Affected: All versions, or not specified |
| CVE-2026-86847 | 6.5 | Oct 14 | Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup Affected: All versions, or not specified |
| CVE-2026-86846 | 6.5 | Oct 14 | Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86845 | 6.5 | Oct 14 | Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup Affected: All versions, or not specified |
| CVE-2026-86566 | 6.5 | Oct 14 | Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) Affected: All versions, or not specified |
| CVE-2026-86561 | 6.5 | Oct 14 | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup Affected: All versions, or not specified |
| CVE-2024-2182 | 6.5 | Mar 12 | Ovn: insufficient validation of bfd packets may lead to denial of service Affected: All versions, or not specified |
| CVE-2026-93683 | 6.4 | Oct 14 | Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou Affected: All versions, or not specified |
| CVE-2026-34956 | 5.9 | May 5 | Openvswitch: open vswitch: denial of service via malformed ftp epasv command Affected: All versions, or not specified |
Showing 19
