CVE catalog

CVE-2026-46448

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

[CVE catalog]

Severity
High · CVSS 8.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 25, 2026

In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no Placement allocation.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannovasid2:34.0.0-4fixed
Debiannovaforky2:33.0.2-1fixed
Debiannovatrixie2:31.0.0-6+deb13u2vulnerable
Debiannovatrixie-security2:31.0.0-6+deb13u2vulnerable
Debiannovabookworm2:26.2.2-1~deb12u4vulnerable
Debiannovabookworm-security2:26.2.2-1~deb12u4vulnerable
CpenovaNot reportedNot reportedvulnerable
CpenovaNot reported31.3.1fixed
CpenovaNot reported32.2.1fixed
CpenovaNot reported33.0.2fixed
Ubuntunovapro2:20.0.0-0ubuntu1vulnerable
Ubuntunovapro2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1vulnerable
Ubuntunovapro2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2vulnerable
Ubuntunovapro2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4vulnerable
Ubuntunovapro2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5vulnerable
Ubuntunovapro2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2vulnerable
Ubuntunovapro2:21.0.0-0ubuntu0.20.04.1vulnerable
Ubuntunovapro2:21.0.0-0ubuntu0.20.04.2vulnerable
Ubuntunovapro2:21.1.0-0ubuntu1vulnerable
Ubuntunovapro2:21.1.1-0ubuntu2vulnerable
Ubuntunovapro2:21.1.2-0ubuntu1vulnerable
Ubuntunovapro2:21.2.0-0ubuntu1vulnerable
Ubuntunovapro2:21.2.1-0ubuntu1vulnerable
Ubuntunovapro2:21.2.2-0ubuntu1vulnerable
Ubuntunovapro2:21.2.3-0ubuntu1vulnerable
Ubuntunovapro2:21.2.4-0ubuntu1vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.1vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.2vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.3vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.4vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.5vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.6vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.8vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.11vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.13vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.14vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.14+esm1vulnerable
Ubuntunovapro2:21.2.4-0ubuntu2.14+esm2vulnerable
Ubuntunova22.043:24.0.0-0ubuntu1vulnerable
Ubuntunova22.043:24.0.0+git2022030310.3f274c65cc-0ubuntu2vulnerable
Ubuntunova22.043:25.0.0-0ubuntu1vulnerable
Ubuntunova22.043:25.0.0-0ubuntu1.1vulnerable
Ubuntunova22.043:25.0.1-0ubuntu1vulnerable
Ubuntunova22.043:25.1.0-0ubuntu1vulnerable
Ubuntunova22.043:25.1.0-0ubuntu2vulnerable
Ubuntunova22.043:25.1.0-0ubuntu2.1vulnerable
Ubuntunova22.043:25.1.0-0ubuntu2.2vulnerable
Ubuntunova22.043:25.1.1-0ubuntu1vulnerable
Ubuntunova22.043:25.1.1-0ubuntu1.1vulnerable
Ubuntunova22.043:25.2.0-0ubuntu1vulnerable
Ubuntunova22.043:25.2.1-0ubuntu1vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2.3vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2.6vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2.7vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2.8vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2.9vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2.10vulnerable
Ubuntunova22.043:25.2.1-0ubuntu2.11fixed
Ubuntunova24.043:28.0.0-0ubuntu1vulnerable
Ubuntunova24.043:28.0.1+git2024011916.087c372a-0ubuntu1vulnerable
Ubuntunova24.043:28.0.1+git2024011916.087c372a-0ubuntu2vulnerable
Ubuntunova24.043:29.0.0~rc1-0ubuntu2vulnerable
Ubuntunova24.043:29.0.1-0ubuntu1vulnerable
Ubuntunova24.043:29.0.1-0ubuntu1.3vulnerable
Ubuntunova24.043:29.0.1-0ubuntu1.4vulnerable
Ubuntunova24.043:29.2.0-0ubuntu1vulnerable
Ubuntunova24.043:29.2.0-0ubuntu1.1vulnerable
Ubuntunova24.043:29.2.0-0ubuntu1.2vulnerable
Ubuntunova24.043:29.2.0-0ubuntu1.3vulnerable
Ubuntunova24.043:29.2.0-0ubuntu1.4vulnerable
Ubuntunova24.043:29.2.0-0ubuntu1.5vulnerable
Ubuntunova24.043:29.2.0-0ubuntu1.7fixed
Ubuntunova25.103:31.0.0-0ubuntu1vulnerable
Ubuntunova25.103:31.0.0+git2025070714.1c03429337-0ubuntu1vulnerable
Ubuntunova25.103:31.0.0+git2025070714.1c03429337-0ubuntu2vulnerable
Ubuntunova25.103:32.0.0~rc1-0ubuntu1vulnerable
Ubuntunova25.103:32.0.0-0ubuntu1vulnerable
Ubuntunova25.103:32.0.0-0ubuntu1.1vulnerable
Ubuntunova25.103:32.0.0-0ubuntu1.2vulnerable
Ubuntunova25.103:32.0.0-0ubuntu1.3fixed
Ubuntunova26.043:32.0.0-0ubuntu1vulnerable
Ubuntunova26.043:32.0.0+git20260128.59a7093-0ubuntu1vulnerable
Ubuntunova26.043:33.0.0~rc1-0ubuntu1vulnerable
Ubuntunova26.043:33.0.0-0ubuntu3vulnerable
Ubuntunova26.043:33.0.0-0ubuntu3.1fixed
CpenovaNot reported33.0.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannovasourcesid2:33.0.1-4not yet assignedNot reported[1140149]
Debiannovasourceforky2:33.0.1-4not yet assignedNot reported[1140149]
Debiannovasourcetrixie(unfixed)not yet assignedNot reported[1140149]
Debiannovasourcebookworm(unfixed)not yet assignedNot reported[1140149]
CpenovacpeNot reported31.3.1Not reportedNot reportedNot reported
CpenovacpeNot reported32.2.1Not reportedNot reportedNot reported
CpenovacpeNot reported33.0.2Not reportedNot reportedNot reported
Ubuntunovadeb22.043:25.2.1-0ubuntu2.11Not reportedUBUNTU-CVE-2026-46448Not reported
Ubuntunovadeb24.043:29.2.0-0ubuntu1.7Not reportedUBUNTU-CVE-2026-46448Not reported
Ubuntunovadeb25.103:32.0.0-0ubuntu1.3Not reportedUBUNTU-CVE-2026-46448Not reported
Ubuntunovadeb26.043:33.0.0-0ubuntu3.1Not reportedUBUNTU-CVE-2026-46448Not reported
CpenovacpeNot reported33.0.2Not reportedNVD-CVE-2026-46448Not reported

[Debian bug #1140149]

Notes

[trixie] nova: Minor issue [bookworm] nova: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [nova-api]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-common]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-compute]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-compute-ironic]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-compute-kvm]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-compute-lxc]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-compute-qemu]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-conductor]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-consoleproxy]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-doc]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [nova-scheduler]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

  • [python3-nova]Affected

    Source package: [nova]

    Details (4)

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

    • 2:26.2.2-1~deb12u4 · all · bookworm-security

      Affected

      nvd · nova · debian · bookworm; nvd · nova · debian · 12

[Debian 13 (Trixie)]

  • [nova-api]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

  • [nova-common]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

  • [nova-compute]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

  • [nova-compute-ironic]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

  • [nova-compute-kvm]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

  • [nova-compute-lxc]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

  • [nova-compute-qemu]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

  • [nova-conductor]Affected

    Source package: [nova]

    Details (4)

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

    • 2:31.0.0-6+deb13u2 · all · trixie-security

      Affected

      nvd · nova · debian · 13

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]