Red Hat Fast Datapath For Rhel 7 vulnerabilities

5 CVEs affecting Red Hat Fast Datapath For Rhel 7, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34956, published 2026-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-2182, published 2024-03-12. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in the Open Virtual Network (OVN). In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside…
CVE-2026-5265, published 2026-04-24. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total…
CVE-2026-34956, published 2026-05-05. Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with…
CVE-2024-11614, published 2024-12-18. High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days. An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging…
CVE-2024-52336, published 2024-11-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local…