# CVE-2026-5367

## Summary

- **CVE ID:** CVE-2026-5367
- **Severity:** HIGH
- **CVSS Score:** 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
- **CWE:** CWE-130
- **Published:** Apr 24, 2026
- **Last Modified:** Aug 25, 2026

## Description

A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could cause the ovn-controller to read beyond the bounds of a packet. This out-of-bounds read can lead to the disclosure of sensitive information stored in heap memory, which is then returned to the attacker's virtual machine port.

## Affected Products

- Red Hat — Fast Datapath for Red Hat Enterprise Linux 8 (0:21.12.0-145.el8fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 9 (0:23.06.4-30.el9fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 9 (0:25.09.2-103.el9fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 8 (0:23.06.4-30.el8fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 9 (0:23.09.6-16.el9fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 9 (0:24.03.7-82.el9fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 9 (0:25.03.2-100.el9fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 10 (0:25.03.2-100.el10fdp)
- Red Hat — Fast Datapath for Red Hat Enterprise Linux 10 (0:25.09.2-103.el10fdp)

## References

- [CNA](https://access.redhat.com/security/cve/CVE-2026-5367)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2455863)
- [CVE](http://www.openwall.com/lists/oss-security/2026/04/20/3)
- [CVE](http://www.openwall.com/lists/oss-security/2026/04/20/5)
- [CNA](https://access.redhat.com/errata/RHSA-2026:11694)
- [CNA](https://access.redhat.com/errata/RHSA-2026:11696)
- [CNA](https://access.redhat.com/errata/RHSA-2026:11702)
- [CNA](https://access.redhat.com/errata/RHSA-2026:11695)
- [CNA](https://access.redhat.com/errata/RHSA-2026:11698)
- [CNA](https://access.redhat.com/errata/RHSA-2026:11700)
- [CNA](https://access.redhat.com/errata/RHSA-2026:11701)
- [CNA](https://access.redhat.com/errata/RHSA-2026:22110)
- [CNA](https://access.redhat.com/errata/RHSA-2026:22111)
- [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5367.json)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.87%
- **EPSS Percentile:** 56.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._