Threats tagged 'ghsa-88xm-vmg5-3cxm'

A use-after-unmap vulnerability exists in the DPDK lib/vhost component due to the VDUSE handler failing to invalidate vring pointers when the IOTLB is invalidated. This flaw can lead to memory corruption and potentially allow an attacker with limited privileges to cause a denial of service or escalate privileges. The issue is tracked as CVE-2026-86567 and has a high severity rating with a CVSS score of 8.8.