Vulnerability-Lookup

CVE-2026-5265 (GCVE-0-2026-5265)

Vulnerability from cvelistv5 – Published: 2026-04-24 12:25 – Updated: 2026-06-17 22:00

Title

Ovn: ovn: heap over-read in icmp error response generation

Summary

When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-24 18:19 UTC

CWE

CWE-130 - Improper Handling of Length Parameter Inconsistency

Assigner

redhat redhat root

References

13 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:11694	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11695	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11696	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11698	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11700	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11701	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:11702	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22110	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22111	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-5265	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2453458	issue-trackingx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2026/04/20/2
http://www.openwall.com/lists/oss-security/2026/04/20/4

Impacted products

12 products

Vendor	Product	Version
Red Hat	Fast Datapath for Red Hat Enterprise Linux 10	Unaffected: 0:25.03.2-100.el10fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:10::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 10	Unaffected: 0:25.09.2-103.el10fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:10::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 8	Unaffected: 0:21.12.0-145.el8fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:8::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 8	Unaffected: 0:23.06.4-30.el8fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:8::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 9	Unaffected: 0:23.06.4-30.el9fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:9::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 9	Unaffected: 0:23.09.6-16.el9fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:9::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 9	Unaffected: 0:24.03.7-82.el9fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:9::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 9	Unaffected: 0:25.03.2-100.el9fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:9::fastdatapath
Red Hat	Fast Datapath for Red Hat Enterprise Linux 9	Unaffected: 0:25.09.2-103.el9fdp , < * (rpm) cpe:/o:redhat:enterprise_linux:9::fastdatapath
Red Hat	Fast Datapath for RHEL 7	cpe:/o:redhat:enterprise_linux:7::fastdatapath
Red Hat	Fast Datapath for RHEL 8	cpe:/o:redhat:enterprise_linux:8::fastdatapath
Red Hat	Fast Datapath for RHEL 9	cpe:/o:redhat:enterprise_linux:9::fastdatapath

Date Public

2026-04-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-04-24T13:37:06.533Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/20/2"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/20/4"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-5265",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-24T18:19:52.126823Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-24T18:21:26.388Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn25.03",
          "product": "Fast Datapath for Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:25.03.2-100.el10fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn25.09",
          "product": "Fast Datapath for Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:25.09.2-103.el10fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn-2021",
          "product": "Fast Datapath for Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:21.12.0-145.el8fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn23.06",
          "product": "Fast Datapath for Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.06.4-30.el8fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn23.06",
          "product": "Fast Datapath for Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.06.4-30.el9fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn23.09",
          "product": "Fast Datapath for Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:23.09.6-16.el9fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn24.03",
          "product": "Fast Datapath for Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:24.03.7-82.el9fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn25.03",
          "product": "Fast Datapath for Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:25.03.2-100.el9fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn25.09",
          "product": "Fast Datapath for Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:25.09.2-103.el9fdp",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn2.11",
          "product": "Fast Datapath for RHEL 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn2.12",
          "product": "Fast Datapath for RHEL 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn2.13",
          "product": "Fast Datapath for RHEL 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn2.11",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn2.12",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn2.13",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.03",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.06",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.09",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.12",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn23.03",
          "product": "Fast Datapath for RHEL 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn-2021",
          "product": "Fast Datapath for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.03",
          "product": "Fast Datapath for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.06",
          "product": "Fast Datapath for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.09",
          "product": "Fast Datapath for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn22.12",
          "product": "Fast Datapath for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn23.03",
          "product": "Fast Datapath for RHEL 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::fastdatapath"
          ],
          "defaultStatus": "affected",
          "packageName": "ovn24.09",
          "product": "Fast Datapath for RHEL 9",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-04-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header\u0027s self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-130",
              "description": "Improper Handling of Length Parameter Inconsistency",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T22:00:07.950Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:11694",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11694"
        },
        {
          "name": "RHSA-2026:11695",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11695"
        },
        {
          "name": "RHSA-2026:11696",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11696"
        },
        {
          "name": "RHSA-2026:11698",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11698"
        },
        {
          "name": "RHSA-2026:11700",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11700"
        },
        {
          "name": "RHSA-2026:11701",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11701"
        },
        {
          "name": "RHSA-2026:11702",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:11702"
        },
        {
          "name": "RHSA-2026:22110",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:22110"
        },
        {
          "name": "RHSA-2026:22111",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:22111"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-5265"
        },
        {
          "name": "RHBZ#2453458",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453458"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-03-24T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-04-06T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Ovn: ovn: heap over-read in icmp error response generation",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-130: Improper Handling of Length Parameter Inconsistency"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-5265",
    "datePublished": "2026-04-24T12:25:06.808Z",
    "dateReserved": "2026-03-31T17:33:09.225Z",
    "dateUpdated": "2026-06-17T22:00:07.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-5265",
      "date": "2026-09-16",
      "epss": "0.00629",
      "percentile": "0.48502"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-5265\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-04-24T13:16:21.770\",\"lastModified\":\"2026-06-17T10:58:42.660\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header\u0027s self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.\"}],\"affected\":[{\"source\":\"secalert@redhat.com\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn25.03\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10::fastdatapath\"],\"versions\":[{\"version\":\"0:25.03.2-100.el10fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn25.09\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10::fastdatapath\"],\"versions\":[{\"version\":\"0:25.09.2-103.el10fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn-2021\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"],\"versions\":[{\"version\":\"0:21.12.0-145.el8fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn23.06\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"],\"versions\":[{\"version\":\"0:23.06.4-30.el8fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn23.06\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"],\"versions\":[{\"version\":\"0:23.06.4-30.el9fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn23.09\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"],\"versions\":[{\"version\":\"0:23.09.6-16.el9fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn24.03\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"],\"versions\":[{\"version\":\"0:24.03.7-82.el9fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn25.03\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"],\"versions\":[{\"version\":\"0:25.03.2-100.el9fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn25.09\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"],\"versions\":[{\"version\":\"0:25.09.2-103.el9fdp\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn2.11\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn2.12\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn2.13\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn2.11\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn2.12\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn2.13\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.03\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.06\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.09\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.12\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn23.03\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn-2021\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.03\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.06\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.09\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn22.12\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn23.03\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fast Datapath for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovn24.09\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":4.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-24T18:19:52.126823Z\",\"id\":\"CVE-2026-5265\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-130\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11694\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11695\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11696\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11698\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11700\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11701\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11702\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22110\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22111\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-5265\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2453458\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/04/20/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/04/20/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-30T11:42:29+00:00",
      "cve": "CVE-2026-5265",
      "id": "CVE-2026-5265",
      "initial_release_date": "2026-04-06T00:00:00+00:00",
      "product_status:fixed": "333",
      "product_status:known_affected": "83",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "ovn: ovn: Heap Over-Read in ICMP Error Response Generation",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5265.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-11T01:44:50Z",
      "cve": "CVE-2026-5265",
      "id": "CVE-2026-5265",
      "initial_release_date": "2026-04-23T01:29:37Z",
      "product_status:known_affected": "135",
      "product_status:known_not_affected": "31",
      "product_status:recommended": "387",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-5265",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-5265.json",
      "version": "17"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/04/20/2\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2026/04/20/4\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-04-24T13:37:06.533Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-5265\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-24T18:19:52.126823Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-24T18:20:20.827Z\"}}], \"cna\": {\"title\": \"Ovn: ovn: heap over-read in icmp error response generation\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Moderate\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:25.03.2-100.el10fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn25.03\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:25.09.2-103.el10fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn25.09\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:21.12.0-145.el8fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn-2021\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.06.4-30.el8fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn23.06\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.06.4-30.el9fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn23.06\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:23.09.6-16.el9fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn23.09\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:24.03.7-82.el9fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn24.03\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:25.03.2-100.el9fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn25.03\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:25.09.2-103.el9fdp\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ovn25.09\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 7\", \"packageName\": \"ovn2.11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 7\", \"packageName\": \"ovn2.12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 7\", \"packageName\": \"ovn2.13\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn2.11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn2.12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn2.13\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn22.03\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn22.06\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn22.09\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn22.12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 8\", \"packageName\": \"ovn23.03\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 9\", \"packageName\": \"ovn-2021\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 9\", \"packageName\": \"ovn22.03\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 9\", \"packageName\": \"ovn22.06\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 9\", \"packageName\": \"ovn22.09\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 9\", \"packageName\": \"ovn22.12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 9\", \"packageName\": \"ovn23.03\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::fastdatapath\"], \"vendor\": \"Red Hat\", \"product\": \"Fast Datapath for RHEL 9\", \"packageName\": \"ovn24.09\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-24T00:00:00.000Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-06T00:00:00.000Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-04-06T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:11694\", \"name\": \"RHSA-2026:11694\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11695\", \"name\": \"RHSA-2026:11695\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11696\", \"name\": \"RHSA-2026:11696\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11698\", \"name\": \"RHSA-2026:11698\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11700\", \"name\": \"RHSA-2026:11700\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11701\", \"name\": \"RHSA-2026:11701\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11702\", \"name\": \"RHSA-2026:11702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22110\", \"name\": \"RHSA-2026:22110\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22111\", \"name\": \"RHSA-2026:22111\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-5265\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2453458\", \"name\": \"RHBZ#2453458\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header\u0027s self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-130\", \"description\": \"Improper Handling of Length Parameter Inconsistency\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-06-17T22:00:07.950Z\"}, \"x_redhatCweChain\": \"CWE-130: Improper Handling of Length Parameter Inconsistency\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-5265\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-17T22:00:07.950Z\", \"dateReserved\": \"2026-03-31T17:33:09.225Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-04-24T12:25:06.808Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

RHSA-2026:11702

Vulnerability from csaf_redhat - Published: 2026-04-29 12:45 - Updated: 2026-08-25 02:27

Summary

Red Hat Security Advisory: ovn25.09 security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

Fixed: 37 products

https://access.redhat.com/errata/RHSA-2026:11702

Open the full advisory

RHSA-2026:22110

Vulnerability from csaf_redhat - Published: 2026-06-01 00:15 - Updated: 2026-08-25 02:27

Summary

Red Hat Security Advisory: ovn25.03 security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

Fixed: 37 products

https://access.redhat.com/errata/RHSA-2026:22110

Open the full advisory

RHSA-2026:22111

Vulnerability from csaf_redhat - Published: 2026-06-01 00:15 - Updated: 2026-08-25 02:27

Summary

Red Hat Security Advisory: ovn25.09 security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

Fixed: 37 products

https://access.redhat.com/errata/RHSA-2026:22111

Open the full advisory

SUSE-SU-2026:22105-1

Vulnerability from csaf_suse - Published: 2026-06-15 09:27 - Updated: 2026-06-15 09:27

Summary

Security update for openvswitch

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 6 products

Open the full advisory

SUSE-SU-2026:22145-1

Vulnerability from csaf_suse - Published: 2026-06-17 08:36 - Updated: 2026-06-17 08:36

Summary

Security update for openvswitch

Severity

Important

Scope

3 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 12 products

Open the full advisory

SUSE-SU-2026:22152-1

Vulnerability from csaf_suse - Published: 2026-06-17 08:36 - Updated: 2026-06-17 08:36

Summary

Security update for openvswitch

Severity

Important

Scope

3 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 116 products

Open the full advisory

SUSE-SU-2026:2475-1

Vulnerability from csaf_suse - Published: 2026-06-22 08:23 - Updated: 2026-06-22 08:23

Summary

Security update for openvswitch

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 150 products

Open the full advisory

SUSE-SU-2026:2476-1

Vulnerability from csaf_suse - Published: 2026-06-22 08:24 - Updated: 2026-06-22 08:24

Summary

Security update for openvswitch3

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 284 products

Open the full advisory

ubuntu-cve-2026-5265

Vulnerability from osv_ubuntu

Published

2026-04-20 00:00

Modified

2026-05-20 15:24

Summary

Details

Severity

6.5 (Medium)


                    
                      CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-5265	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-5265	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "ovn-central",
            "binary_version": "20.03.2-0ubuntu0.20.04.6"
          },
          {
            "binary_name": "ovn-common",
            "binary_version": "20.03.2-0ubuntu0.20.04.6"
          },
          {
            "binary_name": "ovn-controller-vtep",
            "binary_version": "20.03.2-0ubuntu0.20.04.6"
          },
          {
            "binary_name": "ovn-docker",
            "binary_version": "20.03.2-0ubuntu0.20.04.6"
          },
          {
            "binary_name": "ovn-host",
            "binary_version": "20.03.2-0ubuntu0.20.04.6"
          },
          {
            "binary_name": "ovn-ic",
            "binary_version": "20.03.2-0ubuntu0.20.04.6"
          },
          {
            "binary_name": "ovn-ic-db",
            "binary_version": "20.03.2-0ubuntu0.20.04.6"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "ovn",
        "purl": "pkg:deb/ubuntu/ovn@20.03.2-0ubuntu0.20.04.6?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.12.90~git20200107.c80e014d4-0ubuntu1",
        "2.12.90~git20200107.c80e014d4-0ubuntu2",
        "20.03.0~git20200212.9a4e68ec8-0ubuntu1",
        "20.03.0~git20200212.9a4e68ec8-0ubuntu3",
        "20.03.0-0ubuntu1",
        "20.03.1-0ubuntu1",
        "20.03.1-0ubuntu1.1",
        "20.03.1-0ubuntu1.2",
        "20.03.2-0ubuntu0.20.04.1",
        "20.03.2-0ubuntu0.20.04.2",
        "20.03.2-0ubuntu0.20.04.3",
        "20.03.2-0ubuntu0.20.04.4",
        "20.03.2-0ubuntu0.20.04.5",
        "20.03.2-0ubuntu0.20.04.6"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "ovn-central",
            "binary_version": "22.03.8-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "ovn-common",
            "binary_version": "22.03.8-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "ovn-controller-vtep",
            "binary_version": "22.03.8-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "ovn-docker",
            "binary_version": "22.03.8-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "ovn-host",
            "binary_version": "22.03.8-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "ovn-ic",
            "binary_version": "22.03.8-0ubuntu0.22.04.1"
          },
          {
            "binary_name": "ovn-ic-db",
            "binary_version": "22.03.8-0ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "ovn",
        "purl": "pkg:deb/ubuntu/ovn@22.03.8-0ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "21.09.0~git20210922.6549e5842-0ubuntu1",
        "21.09.0~git20210922.6549e5842-0ubuntu2",
        "21.09.0-0ubuntu2",
        "21.12.0-0ubuntu1",
        "22.03.0~git20220218.ed81be7-0ubuntu1",
        "22.03.0-0ubuntu1",
        "22.03.2-0ubuntu0.22.04.1",
        "22.03.3-0ubuntu0.22.04.1",
        "22.03.3-0ubuntu0.22.04.2",
        "22.03.3-0ubuntu0.22.04.3",
        "22.03.3-0ubuntu0.22.04.5",
        "22.03.8-0ubuntu0.22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "ovn-central",
            "binary_version": "24.03.6-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "ovn-common",
            "binary_version": "24.03.6-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "ovn-controller-vtep",
            "binary_version": "24.03.6-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "ovn-docker",
            "binary_version": "24.03.6-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "ovn-host",
            "binary_version": "24.03.6-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "ovn-ic",
            "binary_version": "24.03.6-0ubuntu0.24.04.1"
          },
          {
            "binary_name": "ovn-ic-db",
            "binary_version": "24.03.6-0ubuntu0.24.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "ovn",
        "purl": "pkg:deb/ubuntu/ovn@24.03.6-0ubuntu0.24.04.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "23.09.0-1",
        "23.09.0-2",
        "24.03.0~git20240205.ebb7076-1",
        "24.03.1-2ubuntu1",
        "24.03.1-2ubuntu3",
        "24.03.2-0ubuntu0.24.04.1",
        "24.03.2-0ubuntu0.24.04.2",
        "24.03.6-0ubuntu0.24.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "ovn-central",
            "binary_version": "25.09.0-1"
          },
          {
            "binary_name": "ovn-common",
            "binary_version": "25.09.0-1"
          },
          {
            "binary_name": "ovn-controller-vtep",
            "binary_version": "25.09.0-1"
          },
          {
            "binary_name": "ovn-docker",
            "binary_version": "25.09.0-1"
          },
          {
            "binary_name": "ovn-host",
            "binary_version": "25.09.0-1"
          },
          {
            "binary_name": "ovn-ic",
            "binary_version": "25.09.0-1"
          },
          {
            "binary_name": "ovn-ic-db",
            "binary_version": "25.09.0-1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "ovn",
        "purl": "pkg:deb/ubuntu/ovn@25.09.0-1?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "25.03.0-1",
        "25.09.0~git20250813.23884f5-maysync1",
        "25.09.0-1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "ovn-central",
            "binary_version": "26.03.0-2"
          },
          {
            "binary_name": "ovn-common",
            "binary_version": "26.03.0-2"
          },
          {
            "binary_name": "ovn-controller-vtep",
            "binary_version": "26.03.0-2"
          },
          {
            "binary_name": "ovn-docker",
            "binary_version": "26.03.0-2"
          },
          {
            "binary_name": "ovn-host",
            "binary_version": "26.03.0-2"
          },
          {
            "binary_name": "ovn-ic",
            "binary_version": "26.03.0-2"
          },
          {
            "binary_name": "ovn-ic-db",
            "binary_version": "26.03.0-2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "ovn",
        "purl": "pkg:deb/ubuntu/ovn@26.03.0-2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "25.09.0-1",
        "25.09.0-3",
        "26.03.0~git20260216.b543a88-2",
        "26.03.0-2"
      ]
    }
  ],
  "aliases": [],
  "details": "When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header\u0027s self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validating it against the actual packet buffer size. A VM can send a short packet with an inflated IP length field that triggers an ICMP error (e.g., by hitting a reject ACL), causing ovn-controller to read heap memory beyond the valid packet data and include it in the ICMP response sent back to the VM.",
  "id": "UBUNTU-CVE-2026-5265",
  "modified": "2026-05-20T15:24:32Z",
  "published": "2026-04-20T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-5265"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5265"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-5265"
  ]
}

WID-SEC-W-2026-1315

Vulnerability from csaf_certbund - Published: 2026-04-29 22:00 - Updated: 2026-06-08 22:00

Summary

Fast Datapath für Red Hat Enterprise Linux (ovn): Mehrere Schwachstellen

Severity

Hoch

Scope

2 vulnerabilities in this advisory, including CVE-2026-5265.

CVE-2026-5265

Known affected: 9 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-5265 (GCVE-0-2026-5265)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour