CVE-2026-86846

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Write in DPDK vhost-crypto Backend

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: redhat-SADP

Description

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-86846

EUVD

EUVD-2026-101510

Affected Vendors & Products

Vendor	Product	Version / Range
Red	Hat	Fast Datapath for RHEL 10 *
Red	Hat	Fast Datapath for RHEL 8 *
Red	Hat	Fast Datapath for RHEL 9 *
Red	Hat	Red Hat Enterprise Linux 10 *
Red	Hat	Red Hat Enterprise Linux 8 *
Red	Hat	Red Hat Enterprise Linux 9 *
Red	Hat	Red Hat OpenShift Container Platform 4 *
Red	Hat	Red Hat OpenStack Platform 13 (Queens) *

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds write flaw in DPDK's lib/vhost vhost-crypto component. A guest can supply a malicious avail-ring descriptor index that bypasses bounds checking, causing the host's vhost-crypto backend to write outside intended memory regions. This occurs due to improper validation of guest-controlled indices against queue sizes.

Detection Guidance

Detecting this vulnerability requires checking if vhost-crypto is enabled and if virtio-crypto vhost-user devices are attached to untrusted guests. Inspect DPDK and vhost-crypto configurations, and monitor for out-of-bounds write attempts in vhost-crypto backend logs.

Impact Analysis

An attacker with access to a guest system could exploit this to corrupt memory on the host, potentially leading to denial-of-service conditions, unauthorized code execution, or data corruption. The impact depends on whether vhost-crypto is enabled in your environment.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized memory corruption or denial-of-service conditions through out-of-bounds writes. Such conditions may lead to data integrity issues or unauthorized access, which are critical concerns under these regulations. The availability impact classified as High further exacerbates risks to data availability and integrity.

Mitigation Strategies

Immediately avoid attaching virtio-crypto vhost-user backends to untrusted guests. Disable vhost-crypto if not required. Apply patches or updates from Red Hat when available. Monitor for unusual memory corruption or denial-of-service events in vhost-crypto components.

Hi! I’m here to help you understand CVE-2026-86846. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70