CVE-2026-86856

MediumCVSS 6.5/10Last modified Nov 11, 2026

Description

A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Red HatRed Hat Enterprise Linux 10—
Red HatRed Hat Enterprise Linux 9—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 10—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 8—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatFast Datapath for RHEL 9—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenStack Platform 13 (Queens)—

References

Timeline

Published
Oct 14, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-868578.4ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if CVE-2026-868588.7ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue cCVE-2026-868598.7ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if CVE-2026-86869.1Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by seCVE-2026-868609.3ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could CVE-2026-868615.9pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.cCVE-2026-868626.5pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to CVE-2026-868639.8pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmiCVE-2026-868648.8pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job/<sid>/object request to the pg_dump argument vectCVE-2026-868657.2Tanium addressed a SQL injection vulnerability in Asset.CVE-2026-868676.5Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect CVE-2026-868689.1An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS
CVE-2026-86856: Medium severity, CVSS 6.5 | Vulnix