Known vulnerabilities in Red Hat OpenStack Platform 13 (Queens)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-93009	Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder	4.3 Medium	Oct 29, 2026
CVE-2026-93010	A flaw was found in dnsmasq	4.3 Medium	Oct 29, 2026
CVE-2026-93006	Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content	6.8 Medium	Oct 29, 2026
CVE-2026-93007	Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation	5.3 Medium	Oct 29, 2026
CVE-2026-93011	Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms	5.3 Medium	Oct 29, 2026
CVE-2026-93008	Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations	6.8 Medium	Oct 29, 2026
CVE-2026-86849	Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto	6.5 Medium	Oct 14, 2026
CVE-2026-86856	Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver	6.5 Medium	Oct 14, 2026
CVE-2026-86847	Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup	6.5 Medium	Oct 14, 2026
CVE-2026-86846	Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto	6.5 Medium	Oct 14, 2026
CVE-2026-86845	Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup	6.5 Medium	Oct 14, 2026
CVE-2026-86566	Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)	6.5 Medium	Oct 14, 2026
CVE-2026-86848	Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto	8.8 High	Oct 14, 2026
CVE-2026-86567	Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap	8.8 High	Oct 14, 2026
CVE-2026-100236	Dpdk: dpdk: heap out-of-bounds read/write in gso header copy	8.6 High	Oct 14, 2026
CVE-2026-86565	Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write	8.2 High	Oct 14, 2026
CVE-2026-86563	Dpdk: dpdk: double offset bug in vhost log mapping calculation	7.8 High	Oct 14, 2026
CVE-2026-86562	Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)	7.8 High	Oct 14, 2026
CVE-2026-86561	Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup	6.5 Medium	Oct 14, 2026
CVE-2026-93683	Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou	6.4 Medium	Oct 14, 2026
CVE-2026-93834	Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape	8.8 High	Sep 25, 2026
CVE-2026-81627	Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram	8.2 High	Sep 18, 2026
CVE-2026-42999	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-43000	An issue was discovered in OpenStack Keystone before 29.0.2	6.0 Medium	May 28, 2026
CVE-2026-34956	Openvswitch: open vswitch: denial of service via malformed ftp epasv command	5.9 Medium	May 5, 2026

Other Red Hat products