REDHAT-BUG-2529685: High severity DPDK lib/vhost vulnerability
Published Sep 8, 2026
·Updated
A flaw was found in DPDK lib/vhost. The VDUSE handler does not invalidate vring pointers when the IOTLB is invalidated. A worker thread can continue using dangling vring pointers after munmap(), leading to a crash or use-after-rebind.
Affected Software
1 affected component
DPDK lib/vhost
Event History
Sep 8, 2026
Data Sourced
via Red Hat·02:50 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which deployments should prioritize review?
Prioritize systems using the DPDK lib/vhost VDUSE handler, particularly where vring memory mappings can be invalidated through IOTLB activity while worker threads are running.
2
What condition leads to the unsafe pointer use?
The issue arises when IOTLB invalidation occurs but vring pointers remain valid in the VDUSE handler. A worker thread may then use those pointers after the underlying mapping has been removed with munmap().