Bug 2529667 (CVE-2026-86562) - CVE-2026-86562 dpdk: dpdk: Control-queue descriptor double-fetch overflows host heap in DPDK vhost (VDUSE)
Summary: CVE-2026-86562 dpdk: dpdk: Control-queue descriptor double-fetch overflows ho...
Keywords:
Status: NEW
Alias: CVE-2026-86562
Deadline: 2026-12-08
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2552422 2552423
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-08 02:19 UTC by OSIDB Bzimport
Modified: 2026-10-14 15:47 UTC (History)
30 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-08 02:19:11 UTC 
A flaw was found in DPDK lib/vhost. A control-queue descriptor double-fetch in virtio_net_ctrl_pop() overflows the host heap in the VDUSE path. An incomplete fix in commit 6ec1778134 (January 2026) bounded descriptor indices but did not snapshot lengths.
Note You need to log in before you can comment on or make changes to this bug.