Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

A flaw was found in DPDK lib/vhost vhost-crypto. vhost_crypto_check_chain_request() adds uint32_t length fields without overflow checks, so a wrapped sum can pass the cap while prepare_write_back_data() still uses the original dst_data_len. write_back_data() then memcpy/memset that length from a host mbuf. The RSA request path has no equivalent length cap.