CVE-2026-86846 — Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto
A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the ho…
Published: 2026-10-14 · CVSS: 6.5 · CVSS 3.1
A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7