CVE-2026-86856: Out-of-bounds Write in Red Hat Fast Datapath for RHEL 10
Description
CVE-2026-86856 is a medium severity vulnerability in the DPDK nfp vDPA driver used by Red Hat Fast Datapath for RHEL 10. The flaw allows stack and heap buffer overflows when more virtqueues than expected are configured, potentially causing host crashes or memory corruption. There is no confirmed patch status from the vendor advisory. The vulnerability requires local privileges and has low attack complexity without user interaction.
CVSS v3.1
Score 6.5medium
Affected software
Red Hat
Fast Datapath for RHEL 10
Red Hat
Fast Datapath for RHEL 8
Red Hat
Fast Datapath for RHEL 9
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
Red Hat
Red Hat OpenShift Container Platform 4
Red Hat
Red Hat OpenStack Platform 13 (Queens)
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in the DPDK nfp vDPA driver arises because buffers sized for a single queue pair can be overflowed if more virtqueues are configured. This out-of-bounds write can lead to memory corruption or a host crash. The CVSS 3.1 base score is 6.5, reflecting a local attack vector with low complexity and no user interaction, but with impact limited to availability (host crash) and no confidentiality or integrity impact. The vendor advisory is available but does not explicitly state patch or remediation status.
Potential Impact
Successful exploitation can cause denial of service through host crashes or memory corruption. There is no indication of confidentiality or integrity compromise. The attack requires local privileges and low complexity, limiting the scope to local users with some level of access.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-86856 for current remediation guidance. Until a patch is applied, limit local access to trusted users and monitor for unusual system behavior related to the Fast Datapath component.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-09-08T15:39:19.083Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-86856","vendor":"Red Hat"}]
Threat ID: 6acfc4772cdf04f6569de0c0
Added to database: 10/14/2026, 18:05:43 UTC
Last enriched: 10/14/2026, 18:18:45 UTC
Last updated: 10/14/2026, 19:00:31 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.