CVE-2026-86561

A flaw was found in DPDK lib/vhost.

Published Oct 14, 2026 · updated Oct 15, 2026

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

Oct 14, 2026 · NIST NVD
Detected
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.
Oct 14, 2026 · OSV.dev
Updated
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.
Oct 15, 2026 · NIST NVD
Updated
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.

Affected

Debian:12 dpdk22.11.1-2, 22.11.11-0+deb12u1, 22.11.2-1
Debian:13 dpdk24.11.2-2, 24.11.3-1, 24.11.3-1~deb13u1
Debian:14 dpdk24.11.2-2, 24.11.3-1, 24.11.3-1~deb13u1

Sources

CVE.orgVulnerability recordCVE-2026-86561
Official CVE identifier
cve.org
FIRST EPSSExploitation probabilityCVE-2026-86561
30-day exploitation probability 0.2%
first.org
NIST NVDVulnerability recordCVE-2026-86561
A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.
nvd.nist.gov
OSV.devPackage advisoryDEBIAN-CVE-2026-86561
osv.dev