Към съдържанието
Търсене

CVE-2026-5265: Red Hat Fast Datapath for Red Hat Enterprise Linux 10

6.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, при специфични условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.

Засегнати продукти

  • Red Hat Fast Datapath for Red Hat Enterprise Linux 10: от 0:25.03.2-100.el10fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 10: от 0:25.09.2-103.el10fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 8: от 0:21.12.0-145.el8fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 8: от 0:23.06.4-30.el8fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: от 0:23.06.4-30.el9fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: от 0:23.09.6-16.el9fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: от 0:24.03.7-82.el9fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: от 0:25.03.2-100.el9fdp нататък
  • Red Hat Fast Datapath for Red Hat Enterprise Linux 9: от 0:25.09.2-103.el9fdp нататък
  • Red Hat Fast Datapath for RHEL 7
  • Red Hat Fast Datapath for RHEL 7
  • Red Hat Fast Datapath for RHEL 7
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 8
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Fast Datapath for RHEL 9
  • Red Hat Fast Datapath for RHEL 9

Вид слабост

История

  • 24 април 2026 Публикувано

Други уязвимости в Red Hat Fast Datapath for Red Hat Enterprise Linux 10

Първоизточници

CVE-2026-5265: Red Hat Fast Datapath for Red Hat Enterprise Linux 10 | freedomonline.bg