CVE-2026-86565

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process...

CVE-2026-86565 Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process...

EUVD-2026-101422

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...

CVE-2026-86563

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...

CVE-2026-86563 Dpdk: dpdk: double offset bug in vhost log mapping calculation

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access...

CVE-2026-86563

A flaw exists in DPDK lib/vhost due to a double-offset bug during vhost log mapping calculation. This calculation error can result in incorrect memory access . No specific exploits or in-the-wild exploitation details are provided, and no mitigation is currently available.

CVE-2026-86562

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

EUVD-2026-101421

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-86562

A Time-of-Check to Time-of-Use (TOCTOU) double-fetch vulnerability exists in the DPDK lib/vhost component. Specifically, a double-fetch of control-queue descriptors in the VDUSE control-queue handler allows for a heap buffer overflow containing attacker-controlled content. This flaw is categorize...

CVE-2026-86562 Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-86562

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-86562 Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-86847

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash. Mitigation Do not attach a virtio-crypto vhost-user backend to untrusted guests...

CVE-2026-86849

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend. Mitigation Do not attach a virtio-crypto vhost-user backend to untrusted guests...

CVE-2026-86845

A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend. Mitigation Do not attach a virtio-crypto...

CVE-2026-86561

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption...

CVE-2026-86561

A flaw exists in DPDK lib/vhost where memory size is not adequately validated before the mmap operation during vhost memory-region setup. This vulnerability, categorized under CWE-770 , can lead to memory corruption or a host crash . No mitigation is currently available. No information regarding ...

EUVD-2026-101307

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption...

CVE-2026-86561 Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption...

CVE-2026-86846

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend. Mitigation Do not attach a virtio-crypto vhost-user backend to untrusted guests...