CVE-2026-86566

A flaw exists in DPDK lib/vhost where a guest providing runt RX descriptors can trigger an integer underflow (CWE-191) in the copy length during vhost enqueue (supporting both split and packed rings). This vulnerability results in a denial of service for shared vhost backends, such as OVS-DPDK . ...