498 matches found
CVE-2026-46448
A flaw was found in OpenStack Nova. The server creation application programming interface API fails to remove specific hint data, leading to instances being created without proper Placement allocation. This can result in a denial of service, as resources may not be correctly assigned or managed f...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Nova vulnerability (USN-8434-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8434-1 advisory. It was discovered that Nova did not strip internal nova-prefixed scheduler hints supplied by users on instance creation. An attack...
GHSA-MFG3-P6M3-GJGR OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...
EUVD-2026-37218
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...
CVE-2026-48524 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
GHSA-FHV5-28VV-H8M8 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
GHSA-W7VC-732C-9M39 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
GHSA-XGMM-8J9V-C9WX vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
CVE-2026-48525 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
GHSA-JQ35-7PRP-9V3F vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
CVE-2026-48526 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
CVE-2026-48523 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, ggshield, metaflow-service-fips, openstack-keystone-2026.1, openstack-placement-2026.1, openstack-glance-2025.2, superset-fips, airflow-postgres-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.1-fips, datadog-agent-fips,...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation...
USN-8434-1 nova vulnerability
It was discovered that Nova did not strip internal nova-prefixed scheduler hints supplied by users on instance creation. An attacker could possibly use this issue to bypass Placement resource claims and scheduling constraint enforcement...
Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.8.8
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.8.8 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.8.8 release that simplify the process of...
Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.8
Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.8.8 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.8.8 release that simplify the process of...
CVE-2026-46448
OpenStack Nova before 33.0.2 is affected: the server create API does not strip internal _nova-prefixed scheduler hints, causing instances to be created without proper Placement allocation. This can enable resource misallocation and, in worst cases, denial of service through compute-node resource ...
