high7.8
CVE-2026-86562
A flaw was found in DPDK lib/vhost.
Impact
A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Red Hat | Fast Datapath For RHEL 10 | All versions |
| Red Hat | Fast Datapath For RHEL 8 | All versions |
| Red Hat | Fast Datapath For RHEL 9 | All versions |