Strix
26.1K

CVE-2026-5367

HIGHCVSS 8.6/10EPSS 0.87%

Last modified

CVE-2026-5367 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. EPSS estimates a 0.87% chance of exploitation in the next 30 days.

Description

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.

Metrics

CVSS 3.1
8.6/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS Probability
0.87%

54.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
Red HatFast Datapath for Red Hat Enterprise Linux 10All versions
Red HatFast Datapath for Red Hat Enterprise Linux 8All versions
Red HatFast Datapath for Red Hat Enterprise Linux 9All versions
Red HatFast Datapath for RHEL 8All versions
Red HatFast Datapath for RHEL 9All versions
Red HatRed Hat OpenShift Container Platform 4All versions

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-5367?
A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.
How severe is CVE-2026-5367?
CVE-2026-5367 has a CVSS score of 8.6/10 (HIGH severity). The EPSS model estimates a 0.87% probability of exploitation in the next 30 days.
How do I fix CVE-2026-5367?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-5367?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST