Skip to content
fr Sign in
8.6 High

CVE-2026-5367 A flaw was found in OVN (Open Virtual Network)

Description

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.

Affected products and versions

Product Affected versions Fixed in
Fast Datapath for RHEL 7 Versions not published
Fast Datapath for RHEL 8 Versions not published
Fast Datapath for RHEL 9 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Fast Datapath for RHEL 10 Versions not published
Fast Datapath for Red Hat Enterprise Linux 8 Versions not published
Fast Datapath for Red Hat Enterprise Linux 9 Versions not published
Fast Datapath for Red Hat Enterprise Linux 10 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Fast Datapath for RHEL 7

The 9 CVEs of Fast Datapath for RHEL 7 →
CVE-2026-34956 Openvswitch: open vswitch: denial of service via malformed ftp epasv command 5.9 Medium CVE-2026-5265 When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original… 6.5 Medium CVE-2024-11614 An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature 7.4 High CVE-2024-52336 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root 7.8 High
Track this CVE