CVE-2026-86847: Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
Published Sep 8, 2026
·Updated
A flaw was found in DPDK lib/vhost vhost-crypto. preparewritebackdata() can fail after allocating a write-back node and before setting next to NULL. freewbdata() then recurses on an uninitialized next pointer, which can hang or crash the host vhost-crypto process.
Other sources
A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.
— MITRE
Affected Software
1 affected component
DPDK vhost-crypto
Event History
Sep 8, 2026
Data Sourced
via Red Hat·02:51 PM
DescriptionSeverityAffected Software
Oct 14, 2026
CVE Published
via MITRE·05:52 PM
Data Sourced
via MITRE·05:52 PM
DescriptionSeverityWeakness