CVE-2026-86564: Out-of-bounds Read in Red Hat Fast Datapath for RHEL 10

This vulnerability in Red Hat Fast Datapath for RHEL 10 affects the DPDK lib/vhost component, specifically the virtio-net control-queue handler. The issue is caused by missing length validation before reading command_data, leading to an out-of-bounds read that can crash the host process. The attack vector requires local access with low privileges and no user interaction. Red Hat rates the security impact as low, with a CVSS 3.1 score of 3.3, reflecting an availability impact only. The vulnerability can be triggered by a malicious guest with access to the VDUSE virtio-net control virtqueue. No patch or mitigation is currently available according to the Red Hat advisory.

The vulnerability can cause a denial of service by crashing the host process due to an out-of-bounds read. There is no impact on confidentiality or integrity. The flaw could potentially expose memory contents that might aid in bypassing protection mechanisms, but no direct confidentiality breach is confirmed. The attack requires local access with low privileges and no user interaction, limiting the attack surface. No known exploits are reported in the wild.

Red Hat currently states that no mitigation is available for this vulnerability. Users should monitor Red Hat advisories for updates or patches. Since no fix is available, no immediate remediation actions can be taken beyond restricting access to the virtio-net control virtqueue if possible.