CVE-2026-86848: Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto
Published Sep 8, 2026
·Updated
A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend.
Other sources
A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot still double-fetches srcdesc->next: it checks the index, then indexes the live guest table with a second read. A guest can change next after the check and force an out-of-bounds access. This is a remaining TOCTOU after CVE-2020-14375, not that ID.
— Red Hat
Affected Software
1 affected component
DPDK vhost-crypto
Event History
Sep 8, 2026
Data Sourced
via Red Hat·02:55 PM
DescriptionSeverityAffected Software
Oct 14, 2026
CVE Published
via MITRE·05:50 PM
Data Sourced
via MITRE·05:50 PM
DescriptionSeverityWeakness