CVE-2026-86566

A flaw was found in DPDK lib/vhost.

Published Oct 14, 2026 · updated Oct 14, 2026

A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

Oct 14, 2026 · NIST NVD
Detected
A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK.

Sources

CVE.orgVulnerability recordCVE-2026-86566
Official CVE identifier
cve.org
FIRST EPSSExploitation probabilityCVE-2026-86566
30-day exploitation probability 0.1%
first.org
NIST NVDVulnerability recordCVE-2026-86566
A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK.
nvd.nist.gov