CVE-2026-86845

MediumCVSS 6.5/10Last modified Nov 11, 2026

Description

A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-825

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Red HatRed Hat Enterprise Linux 10—
Red HatRed Hat Enterprise Linux 10—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenStack Platform 13 (Queens)—

References

Timeline

Published
Oct 14, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-868466.5A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, cauCVE-2026-868476.5A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descCVE-2026-868488.8A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a mCVE-2026-868496.5A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can oveCVE-2026-86856.5The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versions up to, and CVE-2026-868506.5The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two of its AJAX actions,CVE-2026-868516.5The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameCVE-2026-868534.3A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make CVE-2026-868566.5A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues arCVE-2026-868578.4ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if CVE-2026-868588.7ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue cCVE-2026-868598.7ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if
CVE-2026-86845: Medium severity, CVSS 6.5 | Vulnix