REDHAT-BUG-2529667: High severity DPDK DPDK vulnerability
Published Sep 8, 2026
·Updated
A flaw was found in DPDK lib/vhost. A control-queue descriptor double-fetch in virtionetctrlpop() overflows the host heap in the VDUSE path. An incomplete fix in commit 6ec1778134 (January 2026) bounded descriptor indices but did not snapshot lengths.
Affected Software
1 affected component
DPDK DPDK
Event History
Sep 8, 2026
Data Sourced
via Red Hat·02:19 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which deployments are exposed to this flaw?
The affected code is in DPDK lib/vhost, and the described heap overflow occurs in the VDUSE path. Deployments not using that path are not identified as affected by the provided information.
2
Does commit 6ec1778134 fully address the issue?
No. The commit bounded descriptor indices, but it did not snapshot descriptor lengths, leaving the double-fetch condition incompletely fixed.