RH
Product
Red Hat OpenStack Platform 13 (Queens)
19
CVEs
0
On KEV
8.8
Max CVSS
14
New 30D
Severity mix
Critical 0High 9Medium 10Low 0
Watch
Add Red Hat OpenStack Platform 13 (Queens) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86848 | 8.8 | Oct 14 | Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto Affected: All versions, or not specified |
| CVE-2026-86567 | 8.8 | Oct 14 | Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap Affected: All versions, or not specified |
| CVE-2026-42999 | 8.8 | May 28 | An issue was discovered in OpenStack Keystone before 29.0.2 Affected: All versions, or not specified |
| CVE-2026-43000 | 8.8 | May 28 | An issue was discovered in OpenStack Keystone before 29.0.2 Affected: All versions, or not specified |
| CVE-2026-100236 | 8.6 | Oct 14 | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy Affected: All versions, or not specified |
| CVE-2026-86565 | 8.2 | Oct 14 | Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write Affected: All versions, or not specified |
| CVE-2026-81627 | 8.2 | Sep 18 | Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram Affected: All versions, or not specified |
| CVE-2026-86563 | 7.8 | Oct 14 | Dpdk: dpdk: double offset bug in vhost log mapping calculation Affected: All versions, or not specified |
| CVE-2026-86562 | 7.8 | Oct 14 | Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) Affected: All versions, or not specified |
Showing 9
