CVE-2026-100236: Out-of-bounds Write in Red Hat Fast Datapath for RHEL 10

The vulnerability in Red Hat Fast Datapath for RHEL 10's DPDK GSO library arises because software GSO does not properly check that the packet header fits in the source first segment or destination buffer before copying. If the header is longer than the configured GSO segment size, it can cause an underflow in the payload-size calculation, resulting in an out-of-bounds read or write. This flaw can be triggered by processing a remote or guest-supplied packet, potentially leading to memory corruption and denial of service or other impacts.

An attacker can remotely or via a guest supply a specially crafted packet that triggers out-of-bounds memory access in the DPDK GSO library. This can lead to memory corruption, causing denial of service or potentially other impacts depending on the exploitation context. The CVSS score of 8.6 reflects high severity with network attack vector, no privileges required, and impacts on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-100236 for current remediation guidance. No official fix or workaround information is provided in the available data. Until a patch is available, consider limiting exposure to untrusted network traffic that could trigger software GSO processing.