An out-of-bounds read occurs in the OVN controller when it processes DHCPv6 SOLICIT packets with an inflated Client ID length, allowing a remote attacker to read sensitive heap memory and return the data to an attacker‑attached virtual machine port. This vulnerability is classified as CWE‑130 and is listed with a CVSS score of 8.6, indicating high severity for confidentiality exposure. The flaw can be triggered by a craft packet sent over the network to the OVN controller, with no authentication or privileged local access required, making remote disclosure possible what makes it a significant confidentiality risk.

The affected products include Red Hat Fast Datapath for Red Hat Enterprise Linux 7, 8 and 9, as well as Red Hat OpenShift Container Platform 4. No specific affected version ranges are provided in the data; version information is therefore not available.

The EPSS score of 0.031% indicates a low but non‑zero probability of exploitation, and the vulnerability is not listed in CISA KEV. The main attack vector is through network‑based DHCPv6 traffic; an attacker can send a malformed SOLICIT packet to the OVN controller and obtain non‑authenticated memory contents. The high CVSS score reflects that the disclosed data could include credentials, keys or other sensitive information, thereby facilitating lateral movement or further compromise if the attacker achieves additional access.