CVE-2026-100236

Awaiting Analysis Awaiting Analysis - Queue

DPDK GSO Library Header Length Buffer Overflow Vulnerability

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: redhat-SADP

Description

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-100236

EUVD

EUVD-2026-101484

Affected Vendors & Products

Vendor	Product	Version / Range
Red	Hat	Fast Datapath for RHEL 10 *
Red	Hat	Fast Datapath for RHEL 8 *
Red	Hat	Fast Datapath for RHEL 9 *
Red	Hat	Red Hat Enterprise Linux 10 *
Red	Hat	Red Hat Enterprise Linux 8 *
Red	Hat	Red Hat Enterprise Linux 9 *
Red	Hat	Red Hat OpenShift Container Platform 4 *
Red	Hat	Red Hat OpenStack Platform 13 (Queens) *

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is in the DPDK GSO library where packet headers are copied without checking if they fit in the source or destination buffer. A header longer than the GSO segment size can cause an out-of-bounds read or write, leading to heap memory corruption.

Detection Guidance

To detect this vulnerability, monitor for crashes or memory corruption in DPDK applications using software GSO. Check logs for heap out-of-bounds errors or process crashes when handling packets from untrusted sources like guests via vhost or scatter RX. Use tools like gdb to analyze core dumps for heap corruption patterns.

Impact Analysis

It can cause heap memory corruption, potentially crashing processes or allowing code execution without elevated privileges. Systems processing untrusted packets with software GSO are at risk, while hardware-based segmentation offloading is unaffected.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized memory access, which may lead to data breaches or integrity violations. Out-of-bounds reads/writes could expose sensitive data or allow tampering with information, violating confidentiality and integrity requirements under these regulations.

Mitigation Strategies

Disable software GSO on untrusted packets or interfaces, especially those handling guest traffic via vhost or scatter RX.
Increase the direct_pool size in DPDK configurations to provide more buffer space for headers.
Apply patches or updates from Red Hat once fixes are released for affected products.
If hardware-based segmentation offloading is available, switch to it to avoid software GSO entirely.

Hi! I’m here to help you understand CVE-2026-100236. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70