What’s Vulnerable › Products
Red Hat Fast Datapath for RHEL 10 vulnerabilities
16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your Red Hat Fast Datapath for RHEL 10 version is affected
Latest Red Hat Fast Datapath for RHEL 10 vulnerabilities
- CVE-2026-86856 — Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver (CVSS 6.5)
- CVE-2026-86849 — Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto (CVSS 6.5)
- CVE-2026-86848 — Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto (CVSS 8.8)
- CVE-2026-86847 — Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup (CVSS 6.5)
- CVE-2026-86846 — Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto (CVSS 6.5)
- CVE-2026-86845 — Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup (CVSS 6.5)
- CVE-2026-86567 — Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap (CVSS 8.8)
- CVE-2026-86566 — Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) (CVSS 6.5)
- CVE-2026-86565 — Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write (CVSS 8.2)
- CVE-2026-86563 — Dpdk: dpdk: double offset bug in vhost log mapping calculation (CVSS 7.8)
- CVE-2026-86562 — Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) (CVSS 7.8)
- CVE-2026-100236 — Dpdk: dpdk: heap out-of-bounds read/write in gso header copy (CVSS 8.6)
- CVE-2026-93683 — Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou (CVSS 6.4)
- CVE-2026-86561 — Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup (CVSS 6.5)
- CVE-2026-86564 — Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler (CVSS 3.3)
- CVE-2024-2182 — Ovn: insufficient validation of bfd packets may lead to denial of service (CVSS 6.5)