← Database

CVE-2026-86846

MEDIUM CVSS: 6.5 Published: 2026-10-14 Modified: 2026-10-14

Description

A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend.

Affected Platforms

Unknown

Weakness Type

CWE-787

References