What’s Vulnerable › Products
Red Hat OpenStack Platform 13 (Queens) vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.
Check whether your Red Hat OpenStack Platform 13 (Queens) version is affected
Latest Red Hat OpenStack Platform 13 (Queens) vulnerabilities
- CVE-2026-86856 — Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver (CVSS 6.5)
- CVE-2026-86849 — Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto (CVSS 6.5)
- CVE-2026-86848 — Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto (CVSS 8.8)
- CVE-2026-86847 — Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup (CVSS 6.5)
- CVE-2026-86846 — Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto (CVSS 6.5)
- CVE-2026-86845 — Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup (CVSS 6.5)
- CVE-2026-86567 — Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap (CVSS 8.8)
- CVE-2026-86566 — Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) (CVSS 6.5)
- CVE-2026-86565 — Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write (CVSS 8.2)
- CVE-2026-86563 — Dpdk: dpdk: double offset bug in vhost log mapping calculation (CVSS 7.8)
- CVE-2026-86562 — Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) (CVSS 7.8)
- CVE-2026-100236 — Dpdk: dpdk: heap out-of-bounds read/write in gso header copy (CVSS 8.6)
- CVE-2026-93683 — Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou (CVSS 6.4)
- CVE-2026-86561 — Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup (CVSS 6.5)
- CVE-2026-81627 — Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram (CVSS 8.2)
- CVE-2026-34956 — Openvswitch: open vswitch: denial of service via malformed ftp epasv command (CVSS 5.9)
- CVE-2021-4472 — Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature (CVSS 6.5)