dpdk: dpdk: VDUSE handler fails to invalidate vring pointers when IOTLB is invalidated, leading to use-after-unmap

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: reset device before deleting virtqueues virtsndremove and virtsndfreeze delete the virtqueues before resetting the device. delvqs frees the vring backing, but does not provide a generic device quiesce operation. In...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146326)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146326 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the...

Exploit for CVE-2026-74580

CVE-2026-74580 CVE...

SUSE CVE-2026-86567

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vhostvdpa: correctly assign the irq bypass producer token Previously, we called irqbypassunregisterproducer within vhostvdpasetupvqirq, which is problematic since we cannot be sure whether the token pointer remains valid. In fact...

CVE-2026-86567

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap...

UBUNTU-CVE-2026-86567

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap...

CVE-2026-86567 Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap...

CVE-2026-86567

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap. Mitigation No mitigation is currently available...

CVE-2026-86567: Use After Free

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap...

PT-2026-114305

Name of the Vulnerable Software and Affected Versions DPDK versions prior to 25.11.4-1.1 Description A flaw exists in the DPDK lib/vhost component where the VDUSE handler does not invalidate vring pointers during IOTLB invalidation. This failure results in a use-after-unmap condition, which occur...

kernel: vhost: reset the vring metadata cache on vring reconfiguration

A flaw was found in the Linux kernel's vhost subsystem. A local attacker could exploit this vulnerability by reconfiguring a virtual ring vring using specific ioctl commands while a device Input/Output Memory Management Unit IOTLB is attached. This improper handling of the vring metadata cache ca...

kernel: vhost: reset the vring metadata cache on vring reconfiguration

A flaw was found in the Linux kernel's vhost subsystem. A local attacker could exploit this vulnerability by reconfiguring a virtual ring vring using specific ioctl commands while a device Input/Output Memory Management Unit IOTLB is attached. This improper handling of the vring metadata cache ca...

Linux Distros Unpatched Vulnerability : CVE-2026-98264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: virtio: reset device before deleting virtqueues virtsndremove and virtsndfreeze delete the virtqueues before resetting the device. delvqs frees the vring...

SUSE CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

DEBIAN-CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

AZL-104721 CVE-2026-97988 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...