Threats Tagged 'cve-2026-86564'

A vulnerability in DPDK lib/vhost involves missing length validation before reading command_data in the virtio-net control-queue handler, which can cause an out-of-bounds read and crash the host process. This flaw can be triggered by a malicious guest with access to the VDUSE virtio-net control virtqueue. The security impact is rated as low, with no confidentiality or integrity impact, but potential availability impact due to a denial-of-service condition. No mitigation or patch is currently available according to the vendor advisory.

CVE-2026-86564 is a low-severity vulnerability in Red Hat Fast Datapath for RHEL 10 involving an out-of-bounds read in the DPDK lib/vhost component. The flaw occurs due to missing length validation before reading command_data in the virtio-net control-queue handler, which can cause a host process crash. A malicious guest with access to the virtio-net control virtqueue can trigger this issue. No confidentiality or integrity impact is reported, only availability impact through potential denial of service. Currently, no mitigation or patch is available from Red Hat.