Threats Tagged 'cve-2026-86564'

A vulnerability (CVE-2026-86564) was identified in the DPDK lib/vhost component involving missing length validation before reading command_data in the virtio-net control queue handler. This flaw could lead to a denial of service (DoS) condition. The issue has a low severity rating with a CVSS score of 3.3. Multiple specific versions of DPDK, particularly Ubuntu-packaged versions from 2.0.0 through 25.11.3, are affected. There is no indication of known exploits in the wild. No patch or remediation details are provided in the available data.

CVE-2026-86564 is a low-severity vulnerability in Red Hat Fast Datapath for RHEL 10 involving an out-of-bounds read in the DPDK lib/vhost component. The flaw arises from missing length validation before reading command_data in the virtio-net control-queue handler, which can cause a host process crash. A malicious guest with access to the virtio-net control virtqueue can trigger this issue. No confidentiality or integrity impact is reported, only availability impact due to potential process crashes. Currently, no mitigation or patch is available from Red Hat.