CVE-2026-86849: Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto
Published Sep 8, 2026
·Updated
A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend.
Other sources
A flaw was found in DPDK lib/vhost vhost-crypto. vhostcryptocheckchainrequest() adds uint32t length fields without overflow checks, so a wrapped sum can pass the cap while preparewritebackdata() still uses the original dstdatalen. writebackdata() then memcpy/memset that length from a host mbuf. The RSA request path has no equivalent length cap.
— Red Hat
Affected Software
1 affected component
DPDK DPDK
Event History
Sep 8, 2026
Data Sourced
via Red Hat·02:59 PM
DescriptionSeverityAffected Software
Oct 14, 2026
CVE Published
via MITRE·05:52 PM
Data Sourced
via MITRE·05:52 PM
DescriptionSeverityWeakness