CVE-2026-86563

HighCVSS 7.8/10Last modified Nov 11, 2026

Description

A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-131

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Red HatRed Hat Enterprise Linux 10—
Red HatRed Hat Enterprise Linux 9—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenStack Platform 13 (Queens)—

References

Timeline

Published
Oct 14, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-865643.3A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause CVE-2026-865658.2A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds wCVE-2026-865666.5A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of serCVE-2026-865678.8A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-afterCVE-2026-86578.2Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/forCVE-2026-865735.1Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affCVE-2026-865749.8Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.CVE-2026-865759.4Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-5CVE-2026-865769.4Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50CVE-2026-865779.4Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JPCVE-2026-865787.3Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: fromCVE-2026-865798.2Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: fro