Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

A flaw was found in DPDK lib/vhost. The virtio-net control-queue handler reads command_data without validating that the copied request is long enough. This out-of-bounds read can cause a host process crash under hardened allocators or sanitizers.