RH
Product
Red Hat OpenStack Platform 13 (Queens)
by Red Hat · last CVE Oct 14, 2026
19
CVEs
0
On KEV
8.8
Max CVSS
14
New 30D
Severity mix
Critical 0High 9Medium 10Low 0
Watch

Add Red Hat OpenStack Platform 13 (Queens) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86848
8.8
0%
Oct 14
Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto
Affected: All versions, or not specified
CVE-2026-86567
8.8
0%
Oct 14
Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap
Affected: All versions, or not specified
CVE-2026-42999
8.8
0%
May 28
An issue was discovered in OpenStack Keystone before 29.0.2
Affected: All versions, or not specified
CVE-2026-43000
8.8
0%
May 28
An issue was discovered in OpenStack Keystone before 29.0.2
Affected: All versions, or not specified
CVE-2026-100236
8.6
0%
Oct 14
Dpdk: dpdk: heap out-of-bounds read/write in gso header copy
Affected: All versions, or not specified
CVE-2026-86565
8.2
0%
Oct 14
Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
Affected: All versions, or not specified
CVE-2026-81627
8.2
0%
Sep 18
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
Affected: All versions, or not specified
CVE-2026-86563
7.8
0%
Oct 14
Dpdk: dpdk: double offset bug in vhost log mapping calculation
Affected: All versions, or not specified
CVE-2026-86562
7.8
0%
Oct 14
Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)
Affected: All versions, or not specified
Showing 9