[CVE-2026-86565] A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descripto…

Descripción técnica

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

Puntuación CVSS

Score: 8.2/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Debilidades (CWE)

CWE-787

Fuente oficial

Publicado en NIST NVD.