# Red Hat Fast Datapath for RHEL 10. Every CVE that names Red Hat Fast Datapath for RHEL 10 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86849.md) `CVE-2026-86849` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver](https://agentprime.io/advisories/CVE-2026-86856.md) `CVE-2026-86856` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup](https://agentprime.io/advisories/CVE-2026-86847.md) `CVE-2026-86847` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86846.md) `CVE-2026-86846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup](https://agentprime.io/advisories/CVE-2026-86845.md) `CVE-2026-86845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)](https://agentprime.io/advisories/CVE-2026-86566.md) `CVE-2026-86566` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86848.md) `CVE-2026-86848` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap](https://agentprime.io/advisories/CVE-2026-86567.md) `CVE-2026-86567` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: heap out-of-bounds read/write in gso header copy](https://agentprime.io/advisories/CVE-2026-100236.md) `CVE-2026-100236` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write](https://agentprime.io/advisories/CVE-2026-86565.md) `CVE-2026-86565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: double offset bug in vhost log mapping calculation](https://agentprime.io/advisories/CVE-2026-86563.md) `CVE-2026-86563` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)](https://agentprime.io/advisories/CVE-2026-86562.md) `CVE-2026-86562` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup](https://agentprime.io/advisories/CVE-2026-86561.md) `CVE-2026-86561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou](https://agentprime.io/advisories/CVE-2026-93683.md) `CVE-2026-93683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition - [Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler](https://agentprime.io/advisories/CVE-2026-86564.md) `CVE-2026-86564` · CVE record: Red Hat Fast Datapath for RHEL 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption - [Ovn: insufficient validation of bfd packets may lead to denial of service](https://agentprime.io/advisories/CVE-2024-2182.md) `CVE-2024-2182` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-346 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .