Red Hat Red Hat OpenStack Platform 13 (Queens)

• CVE-2026-93009 Medium 4.3 Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder 0.2%
• CVE-2026-93010 Medium 4.3 Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check 0.2%
• CVE-2026-93006 Medium 6.8 Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content 0.3%
• CVE-2026-93007 Medium 5.3 Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation 0.4%
• CVE-2026-93011 Medium 5.3 Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms 0.6%
• CVE-2026-93008 Medium 6.8 Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations 0.1%
• CVE-2026-86849 Medium 6.5 Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto 0.1%
• CVE-2026-86856 Medium 6.5 Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver 0.2%
• CVE-2026-86847 Medium 6.5 Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup 0.2%
• CVE-2026-86846 Medium 6.5 Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto 0.2%
• CVE-2026-86845 Medium 6.5 Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup 0.2%
• CVE-2026-86566 Medium 6.5 Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) 0.2%
• CVE-2026-86848 High 8.8 Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto 0.1%
• CVE-2026-86567 High 8.8 Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap 0.2%
• CVE-2026-100236 High 8.6 Dpdk: dpdk: heap out-of-bounds read/write in gso header copy 0.4%
• CVE-2026-86565 High 8.2 Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write 0.2%
• CVE-2026-86563 High 7.8 Dpdk: dpdk: double offset bug in vhost log mapping calculation 0.2%
• CVE-2026-86562 High 7.8 Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) 0.2%
• CVE-2026-86561 Medium 6.5 Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup 0.2%
• CVE-2026-93683 Medium 6.4 Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou 0.1%
• CVE-2026-93834 High 8.8 Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape 0.4%
• CVE-2026-81627 High 8.2 Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram 0.2%
• CVE-2026-34956 Medium 5.9 Openvswitch: open vswitch: denial of service via malformed ftp epasv command 0.4%
• CVE-2021-4472 Medium 6.5 Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature 0.5%
• CVE-2023-1932 Medium 6.1 Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss 0.5%
• CVE-2024-7319 Medium 5.0 Openstack-heat: incomplete fix for cve-2023-1625 0.4%
• CVE-2024-2182 Medium 6.5 Ovn: insufficient validation of bfd packets may lead to denial of service 0.8%
• CVE-2023-3153 Medium 5.3 Service monitor mac flow is not rate limited 1.0%
• CVE-2023-1633 Medium 6.6 Insecure barbican configuration file leaking credential 0.2%
• CVE-2023-1636 Medium 6.0 Incomplete container isolation 0.5%
• CVE-2023-1625 High 7.4 Information leak in api 0.7%
• CVE-2023-1108 High 7.5 Undertow: infinite loop in sslconduit during close 1.8%
• CVE-2023-2680 High 7.5 Dma reentrancy issue (incomplete fix for cve-2021-3750) 0.2%
• CVE-2023-3301 Medium 5.6 Triggerable assertion due to race condition in hot-unplug 0.3%
• CVE-2023-3354 High 7.5 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service 1.6%