A flaw was found in DPDK lib/vhost vhost-crypto. vhost_crypto_check_chain_request() adds uint32_t length fields without overflow checks, so a wrapped sum can pass the cap while prepare_write_back_data() still uses the original dst_data_len. write_back_data() then memcpy/memset that length from a host mbuf. The RSA request path has no equivalent length cap.