RLSA-2026:98616 Important: dpdk security update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fixes: dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor...

dpdk security update

An update is available for dpdk. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dpdk packages provide the Data Plane Development Kit, which is a set of...

dpdk security update

An update is available for dpdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dpdk packages provide the Data Plane Development Kit, which is a set of...

RLSA-2026:98505 Important: dpdk security update

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space. Security Fixes: dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor...

Rocky Linux 9 [CIQ] Security Update: dpdk / dpdk-debuginfo / dpdk-debugsource / dpdk-devel / dpdk-doc / etc Multiple Vulnerabilities (crlsa-2026_98505)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202698505 advisory. dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup CVE-2026-86561 dpdk: dpdk: Control-queue descriptor double-fetch...

SUSE SLES15: dpdk / dpdk-devel / dpdk-kmp-default / dpdk-thunderx / etc (SUSE-SU-2026:5184-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5184-1 advisory. - CVE-2026-86561: missing memory size validation before mmap in vhost memory region setup bsc1285678. - CVE-2026-86563: double offs...

SUSE SLES15: dpdk / dpdk-devel / dpdk-thunderx / dpdk-thunderx-devel / etc (SUSE-SU-2026:5200-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5200-1 advisory. - CVE-2026-86561: missing memory size validation before mmap in vhost memory region setup bsc1285678. - CVE-2026-86562: double-fetc...

dpdk: dpdk: Integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend...

Important: Red Hat Security Advisory: dpdk security update

An update for dpdk is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

dpdk: dpdk: Guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend...

dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

dpdk: dpdk: Guest-triggered use-after-free and type confusion in vhost-crypto session cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend...

dpdk: dpdk: Time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto

A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend...

Security update for dpdk

This update for dpdk fixes the following issues: Update to version 24.11.8. CVE-2026-86561: missing memory size validation before mmap in vhost memory region setup bsc1285678. CVE-2026-86562: double-fetch leading to heap buffer overflow in virtionetctrlpop bsc1285677. CVE-2026-86563: double offse...

SUSE-SU-2026:5200-1 Security update for dpdk

This update for dpdk fixes the following issues: - CVE-2026-86561: missing memory size validation before mmap in vhost memory region setup bsc1285678. - CVE-2026-86562: double-fetch leading to heap buffer overflow in virtionetctrlpop bsc1285677. - CVE-2026-86563: double offset bug in vhost log...

Important: Red Hat Security Advisory: dpdk security update

An update for dpdk is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

dpdk: dpdk: Guest-triggered use-after-free and type confusion in vhost-crypto session cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend...

dpdk: dpdk: Guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend...

dpdk: dpdk: Integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto

A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend...

dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...