CVE-2026-86567: Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap
Published Sep 8, 2026
·Updated
A flaw was found in DPDK lib/vhost. The VDUSE handler does not invalidate vring pointers when the IOTLB is invalidated. A worker thread can continue using dangling vring pointers after munmap(), leading to a crash or use-after-rebind.
Other sources
A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap.
— MITRE
Affected Software
1 affected component
DPDK lib/vhost
Event History
Sep 8, 2026
Data Sourced
via Red Hat·02:50 AM
DescriptionSeverityAffected Software
Oct 14, 2026
CVE Published
via MITRE·05:50 PM
Data Sourced
via MITRE·05:50 PM
DescriptionSeverityWeakness