CVE-2026-86561

Published: Oct 14, 2026Modified: Oct 20, 2026

6.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.0 / Impact: 4.0

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://access.redhat.com/security/cve/CVE-2026-86561

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2529666

Source: secalert@redhat.com

Timeline

No history available yet.