CVE-2026-86567

Awaiting Analysis Awaiting Analysis - Queue

VDUSE vring Use-After-Unmap in DPDK

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: redhat-SADP

Description

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-86567

EUVD

EUVD-2026-101505

Affected Vendors & Products

Vendor	Product	Version / Range
Red	Hat	Fast Datapath for RHEL 10 *
Red	Hat	Fast Datapath for RHEL 8 *
Red	Hat	Fast Datapath for RHEL 9 *
Red	Hat	Red Hat Enterprise Linux 10 *
Red	Hat	Red Hat Enterprise Linux 8 *
Red	Hat	Red Hat Enterprise Linux 9 *
Red	Hat	Red Hat OpenShift Container Platform 4 *
Red	Hat	Red Hat OpenStack Platform 13 (Queens) *

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

CVE-2026-86567 is a flaw in DPDK's lib/vhost component where the VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated. This leads to a use-after-unmap condition, where a worker thread may continue using dangling pointers after memory is unmapped, causing crashes or memory corruption.

Detection Guidance

Detection involves monitoring for crashes or memory corruption in systems using DPDK's VDUSE functionality. Check logs for use-after-unmap errors or IOTLB invalidation failures. No specific commands are provided in the resources.

Impact Analysis

This vulnerability can be exploited by a malicious VM with a VDUSE device through memory hot-remove, balloon inflation, or IOMMU mapping changes. It may result in memory corruption, crashes, information leaks, or arbitrary code execution, compromising system stability and security.

Compliance Impact

This vulnerability could lead to memory corruption, crashes, information leaks, or arbitrary code execution due to use-after-unmap. Such issues may violate data integrity and confidentiality requirements in GDPR and HIPAA, potentially resulting in unauthorized access to sensitive data or system failures that compromise compliance.

Mitigation Strategies

No mitigation is currently available according to Red Hat. Avoid using VDUSE devices in untrusted environments. Monitor for updates from Red Hat or DPDK for patches.

Hi! I’m here to help you understand CVE-2026-86567. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70