ZeroDay Findings
Sign inSign up

Findings

CVE-2026-86856

A flaw was found in the DPDK nfp vDPA driver.

Published Oct 14, 2026 · updated Oct 15, 2026

A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 14, 2026 · NIST NVD

    Detected

    A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.

  3. Oct 15, 2026 · NIST NVD

    Updated

    A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.

Sources

  • CVE.orgVulnerability recordCVE-2026-86856

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-86856

    30-day exploitation probability 0.1%

    first.org
  • NIST NVDVulnerability recordCVE-2026-86856

    A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.

    nvd.nist.gov

References