CVE-2026-86565: Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.
Other sources
A flaw was found in DPDK lib/vhost. Virtqueue size can be desynchronized from the inflight descriptor table size, causing an out-of-bounds write in the host vhost process.
— Red Hat
Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 23.11.8-1
Event History
Frequently Asked Questions
What level of attacker access is required for exploitation?
The CVSS vector indicates local access and high privileges are required. No user interaction is required.
What is the potential impact on the affected host process?
Successful exploitation can cause an out-of-bounds write in the host vhost process. The CVSS assessment rates confidentiality, integrity, and availability impact as high, with scope changed.