CVE-2026-86846 Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend...

CVE-2026-86846

A flaw in DPDK lib/vhost vhost-crypto allows a guest to trigger an out-of-bounds write in the host vhost-crypto backend. The vulnerability occurs because a guest can supply an avail-ring descriptor index that is used without proper bounds checking. This could lead to a high availability impact as...