CVE-2026-46448
highPriorität · verfolgen · 34EPSS 0.003 · 20. PerzentilEUUSEPSS · bewertet 2026-10-28
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.4–8.5
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (10)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-mfg3-p6m3-gjgrOpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints2026-06-16ghsa · osvUS
## Affects - Nova: >=18.0.0 <31.3.1, >=32.0.0 <32.2.1, >=33.0.0 <33.0.2 ## Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. ## Patches - https://review.opendev.org/993604 (2025.1/epoxy) - https://review.opendev.org/993603 (2025.2/flamingo) - https://review.opendev.org/993602 (2026.1/gazpacho) - https://review.opendev.org/993601 (2026.2/hibiscus) ## Credits - Erichen from Institute of Computing Technology, Chinese Academy of Sciences (CVE-2026-46448)
- PYSEC-2026-2686OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints2026-07-13vendor · osvUS
## Affects - Nova: >=18.0.0 <31.3.1, >=32.0.0 <32.2.1, >=33.0.0 <33.0.2 ## Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. ## Patches - https://review.opendev.org/993604 (2025.1/epoxy) - https://review.opendev.org/993603 (2025.2/flamingo) - https://review.opendev.org/993602 (2026.1/gazpacho) - https://review.opendev.org/993601 (2026.2/hibiscus) ## Credits - Erichen from Institute of Computing Technology, Chinese Academy of Sciences (CVE-2026-46448)
auch bekannt als (6)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2026/06/16/5cnnvd
- https://bugs.launchpad.net/nova/+bug/2151252cnnvd
- https://www.openwall.com/lists/oss-security/2026/06/16/5cnnvd
- https://bugs.launchpad.net/nova/+bug/2151252enisa_euvd
- https://www.openwall.com/lists/oss-security/2026/06/16/5enisa_euvd
- http://www.openwall.com/lists/oss-security/2026/06/16/5Mailing ListThird Party Advisorynvd
- https://bugs.launchpad.net/nova/+bug/2151252ExploitIssue TrackingThird Party Advisorynvd
- https://www.openwall.com/lists/oss-security/2026/06/16/5Mailing ListThird Party Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan