What’s Vulnerable › Products
Red Hat Fast Datapath for RHEL 8 vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.
Check whether your Red Hat Fast Datapath for RHEL 8 version is affected
Latest Red Hat Fast Datapath for RHEL 8 vulnerabilities
- CVE-2026-86856 — Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver (CVSS 6.5)
- CVE-2026-86849 — Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto (CVSS 6.5)
- CVE-2026-86848 — Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto (CVSS 8.8)
- CVE-2026-86847 — Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup (CVSS 6.5)
- CVE-2026-86846 — Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto (CVSS 6.5)
- CVE-2026-86845 — Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup (CVSS 6.5)
- CVE-2026-86567 — Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap (CVSS 8.8)
- CVE-2026-86566 — Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) (CVSS 6.5)
- CVE-2026-86565 — Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write (CVSS 8.2)
- CVE-2026-86563 — Dpdk: dpdk: double offset bug in vhost log mapping calculation (CVSS 7.8)
- CVE-2026-86562 — Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) (CVSS 7.8)
- CVE-2026-100236 — Dpdk: dpdk: heap out-of-bounds read/write in gso header copy (CVSS 8.6)
- CVE-2026-93683 — Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou (CVSS 6.4)
- CVE-2026-86561 — Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup (CVSS 6.5)
- CVE-2026-86564 — Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler (CVSS 3.3)
- CVE-2026-34956 — Openvswitch: open vswitch: denial of service via malformed ftp epasv command (CVSS 5.9)
- CVE-2026-5367 — Ovn: ovn: information disclosure via crafted dhcpv6 packets (CVSS 8.6)
- CVE-2026-5265 — Ovn: ovn: heap over-read in icmp error response generation (CVSS 6.5)