CVE-2026-86847: Access of Uninitialized Pointer in Red Hat Fast Datapath for RHEL 10

This vulnerability in Red Hat Fast Datapath for RHEL 10's DPDK lib/vhost vhost-crypto arises from improper handling of an uninitialized pointer during write-back chain cleanup when guest descriptor mapping fails. The flaw can cause the host vhost-crypto process to hang or crash, impacting availability. The CVSS 3.1 vector indicates local attack vector with low complexity, requiring low privileges and no user interaction, and the impact is limited to availability (denial of service). The vendor advisory URL is provided but does not include explicit patch or remediation details in the input data.

Successful exploitation results in the host vhost-crypto process hanging or crashing, causing denial of service. There is no impact on confidentiality or integrity reported. The attack requires local access with low privileges and does not require user interaction.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-86847 for current remediation guidance. Until an official fix is available, monitor for updates from Red Hat. No vendor advisory content explicitly states that no action is required or that the issue is already mitigated.