CVE-2026-34956: Red Hat Fast Datapath For Rhel 7

Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access error can lead to a crash, resulting in a Denial of Service (DoS) for the affected system.

Affected products

• Red Hat Fast Datapath For Rhel 7
• Red Hat Fast Datapath For Rhel 8
• Red Hat Fast Datapath For Rhel 9
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Openshift Container Platform 4
• Red Hat Red Hat Openstack Platform 13 Queens
• Red Hat Red Hat Openstack Platform 16.2
• Red Hat Red Hat Openstack Platform 17.1
• Red Hat Red Hat Openstack Platform 18.0

Published 2026-05-05. Last modified 2026-09-01.