AZL-108327 CVE-2026-86847 affecting package ceph 18.2.2-13

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

CVE-2026-86846

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend...

CVE-2026-86848

A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend...

PT-2026-114309

Name of the Vulnerable Software and Affected Versions DPDK affected versions not specified Description A flaw exists in the DPDK lib/vhost vhost-crypto component. The indirect-descriptor snapshot performs a double-fetch of a guest descriptor next index, creating a time-of-check/time-of-use TOCTOU...