# Red Hat OpenStack Platform 13 (Queens).

Every CVE that names Red Hat OpenStack Platform 13 (Queens) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder](https://agentprime.io/advisories/CVE-2026-93009.md)
  `CVE-2026-93009` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption
- [Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check](https://agentprime.io/advisories/CVE-2026-93010.md)
  `CVE-2026-93010` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Broken access control
- [Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content](https://agentprime.io/advisories/CVE-2026-93006.md)
  `CVE-2026-93006` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-672
- [Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation](https://agentprime.io/advisories/CVE-2026-93007.md)
  `CVE-2026-93007` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service
- [Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms](https://agentprime.io/advisories/CVE-2026-93011.md)
  `CVE-2026-93011` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Memory corruption
- [Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations](https://agentprime.io/advisories/CVE-2026-93008.md)
  `CVE-2026-93008` · CVE record: Red Hat Red Hat Ceph Storage 9 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-345
- [Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86849.md)
  `CVE-2026-86849` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver](https://agentprime.io/advisories/CVE-2026-86856.md)
  `CVE-2026-86856` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup](https://agentprime.io/advisories/CVE-2026-86847.md)
  `CVE-2026-86847` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86846.md)
  `CVE-2026-86846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup](https://agentprime.io/advisories/CVE-2026-86845.md)
  `CVE-2026-86845` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)](https://agentprime.io/advisories/CVE-2026-86566.md)
  `CVE-2026-86566` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto](https://agentprime.io/advisories/CVE-2026-86848.md)
  `CVE-2026-86848` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition
- [Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap](https://agentprime.io/advisories/CVE-2026-86567.md)
  `CVE-2026-86567` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: heap out-of-bounds read/write in gso header copy](https://agentprime.io/advisories/CVE-2026-100236.md)
  `CVE-2026-100236` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write](https://agentprime.io/advisories/CVE-2026-86565.md)
  `CVE-2026-86565` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: double offset bug in vhost log mapping calculation](https://agentprime.io/advisories/CVE-2026-86563.md)
  `CVE-2026-86563` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)](https://agentprime.io/advisories/CVE-2026-86562.md)
  `CVE-2026-86562` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition
- [Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup](https://agentprime.io/advisories/CVE-2026-86561.md)
  `CVE-2026-86561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou](https://agentprime.io/advisories/CVE-2026-93683.md)
  `CVE-2026-93683` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Race condition
- [Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape](https://agentprime.io/advisories/CVE-2026-93834.md)
  `CVE-2026-93834` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Memory corruption
- [Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram](https://agentprime.io/advisories/CVE-2026-81627.md)
  `CVE-2026-81627` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Openvswitch: open vswitch: denial of service via malformed ftp epasv command](https://agentprime.io/advisories/CVE-2026-34956.md)
  `CVE-2026-34956` · CVE record: Red Hat Fast Datapath for RHEL 7 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2026 · Tags: Memory corruption
- [Ovn: insufficient validation of bfd packets may lead to denial of service](https://agentprime.io/advisories/CVE-2024-2182.md)
  `CVE-2024-2182` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 8 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-346
- [Service monitor mac flow is not rate limited](https://agentprime.io/advisories/CVE-2023-3153.md)
  `CVE-2023-3153` · CVE record: ovn and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Oct 2023 · Tags: Denial of service
- [Dma reentrancy issue (incomplete fix for cve-2021-3750)](https://agentprime.io/advisories/CVE-2023-2680.md)
  `CVE-2023-2680` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Sept 2023 · Tags: Memory corruption
- [Triggerable assertion due to race condition in hot-unplug](https://agentprime.io/advisories/CVE-2023-3301.md)
  `CVE-2023-3301` · CVE record: qemu and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: Denial of service
- [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md)
  `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-openstack-platform-13-queens>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-openstack-platform-13-queens/>. Everything for agents: <https://agentprime.io/llms.txt>.