# Red Hat Fast Datapath for RHEL 8.

Every CVE that names Red Hat Fast Datapath for RHEL 8 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86849.md)
  `CVE-2026-86849` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver](https://agentprime.io/advisories/CVE-2026-86856.md)
  `CVE-2026-86856` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup](https://agentprime.io/advisories/CVE-2026-86847.md)
  `CVE-2026-86847` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86846.md)
  `CVE-2026-86846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup](https://agentprime.io/advisories/CVE-2026-86845.md)
  `CVE-2026-86845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)](https://agentprime.io/advisories/CVE-2026-86566.md)
  `CVE-2026-86566` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86848.md)
  `CVE-2026-86848` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition
- [Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap](https://agentprime.io/advisories/CVE-2026-86567.md)
  `CVE-2026-86567` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: heap out-of-bounds read/write in gso header copy](https://agentprime.io/advisories/CVE-2026-100236.md)
  `CVE-2026-100236` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write](https://agentprime.io/advisories/CVE-2026-86565.md)
  `CVE-2026-86565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: double offset bug in vhost log mapping calculation](https://agentprime.io/advisories/CVE-2026-86563.md)
  `CVE-2026-86563` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)](https://agentprime.io/advisories/CVE-2026-86562.md)
  `CVE-2026-86562` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition
- [Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup](https://agentprime.io/advisories/CVE-2026-86561.md)
  `CVE-2026-86561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou](https://agentprime.io/advisories/CVE-2026-93683.md)
  `CVE-2026-93683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition
- [Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler](https://agentprime.io/advisories/CVE-2026-86564.md)
  `CVE-2026-86564` · CVE record: Red Hat Fast Datapath for RHEL 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Openvswitch: open vswitch: denial of service via malformed ftp epasv command](https://agentprime.io/advisories/CVE-2026-34956.md)
  `CVE-2026-34956` · CVE record: Red Hat Fast Datapath for RHEL 7 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption
- [Ovn: ovn: heap over-read in icmp error response generation](https://agentprime.io/advisories/CVE-2026-5265.md)
  `CVE-2026-5265` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-130
- [Ovn: ovn: information disclosure via crafted dhcpv6 packets](https://agentprime.io/advisories/CVE-2026-5367.md)
  `CVE-2026-5367` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-130
- [Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library](https://agentprime.io/advisories/CVE-2024-11614.md)
  `CVE-2024-11614` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 7.4 High · Not analysed yet · Published 18 Dec 2024 · Tags: Memory corruption
- [Ovn: insufficient validation of bfd packets may lead to denial of service](https://agentprime.io/advisories/CVE-2024-2182.md)
  `CVE-2024-2182` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-346
- [Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet](https://agentprime.io/advisories/CVE-2023-3966.md)
  `CVE-2023-3966` · CVE record: openvswitch and 4 more · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2024 · Tags: CWE-248
- [Openvswitch don't match packets on nd_target field](https://agentprime.io/advisories/CVE-2023-5366.md)
  `CVE-2023-5366` · CVE record: openvswitch and 4 more · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2023 · Tags: CWE-345
- [Service monitor mac flow is not rate limited](https://agentprime.io/advisories/CVE-2023-3153.md)
  `CVE-2023-3153` · CVE record: ovn and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-fast-datapath-for-rhel-8>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-fast-datapath-for-rhel-8/>. Everything for agents: <https://agentprime.io/llms.txt>.