REDHAT-BUG-2529682: Low severity DPDK lib/vhost vulnerability
Published Sep 8, 2026
·Updated
A flaw was found in DPDK lib/vhost. The virtio-net control-queue handler reads commanddata without validating that the copied request is long enough. This out-of-bounds read can cause a host process crash under hardened allocators or sanitizers.
Affected Software
1 affected component
DPDK lib/vhost
Event History
Sep 8, 2026
Data Sourced
via Red Hat·02:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What must an attacker be able to do to trigger the flaw?
They must be able to provide a virtio-net control-queue request whose copied data is shorter than the handler expects, causing command_data to be read out of bounds.
2
What is the documented impact?
The out-of-bounds read can crash the affected host process, particularly when hardened allocators or sanitizers are in use.