gatekeeper

Gatekeeper What is Gatekeeper? Gatekeeper is the first open source DDoS protection system. It is designed to scale to any peak bandwidth, so it can withstand DDoS attacks both of today and of tomorrow. In spite of the geographically distributed architecture of Gatekeeper, the network policy that...

CVE-2026-86567 affecting package dpdk for versions less than 23.11.8-1

CVE-2026-86567 affecting package dpdk for versions less than 23.11.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-86564 affecting package dpdk for versions less than 23.11.8-1

CVE-2026-86564 affecting package dpdk for versions less than 23.11.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-86565 affecting package dpdk for versions less than 23.11.8-1

CVE-2026-86565 affecting package dpdk for versions less than 23.11.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-100236 affecting package dpdk for versions less than 23.11.8-1

CVE-2026-100236 affecting package dpdk for versions less than 23.11.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-86562 affecting package dpdk for versions less than 23.11.8-1

CVE-2026-86562 affecting package dpdk for versions less than 23.11.8-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2026:12151-1 dpdk-25.11.4-1.1 on GA media

These are all security issues fixed in the dpdk-25.11.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-86561

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption...

SUSE CVE-2026-86562

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

SUSE CVE-2026-86563

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...

SUSE CVE-2026-86565

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process...

SUSE CVE-2026-86566

A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK...

SUSE CVE-2026-86567

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap...

SUSE CVE-2026-86845

A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend...

SUSE CVE-2026-86846

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend...

SUSE CVE-2026-86847

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

SUSE CVE-2026-86848

A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend...

SUSE CVE-2026-86849

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend...

SUSE CVE-2026-86856

A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption...

SUSE CVE-2026-93683

A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an...