ZeroDay Findings
Sign inSign up

Findings

CVE-2026-86565

A flaw was found in DPDK lib/vhost.

Published Oct 14, 2026 · updated Oct 14, 2026

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · NIST NVD

    Detected

    A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

  3. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

  4. Oct 14, 2026 · OSV.dev

    Updated

    A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

Affected

  • Debian:12 dpdk22.11.1-2, 22.11.11-0+deb12u1, 22.11.2-1
  • Debian:13 dpdk24.11.2-2, 24.11.3-1, 24.11.3-1~deb13u1
  • Debian:14 dpdk24.11.2-2, 24.11.3-1, 24.11.3-1~deb13u1

Sources

  • CVE.orgCVE-2026-86565

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2026-86565

    A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

    nvd.nist.gov
  • OSV.devDEBIAN-CVE-2026-86565
    osv.dev

References