EUVD-2026-74296
GHSA-v82g-5rfm-rj2j
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Local access via guest VM control virtqueue required (AV:L); no scope change, no confidentiality/integrity impact; only partial availability loss from process crash.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
Lifecycle Timeline
2DescriptionCVE.org
A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.
AnalysisAI
Out-of-bounds read in DPDK's lib/vhost virtio-net control-queue handler allows a local low-privileged attacker - such as a guest VM user with access to the virtio-net control virtqueue - to trigger an unchecked read of command_data, crashing the host-side DPDK vhost process. Affected deployments include NFV platforms, cloud hypervisors, and telco packet-processing stacks that use DPDK vhost-user for guest I/O. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local access to a system running DPDK with the vhost-user virtio-net subsystem enabled, and at minimum low-level privileges sufficient to send commands via the virtio-net control virtqueue - in practice this means being a guest VM user or a local process with access to the vhost-user socket. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.3 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) accurately characterizes the constrained attack surface: exploitation is local, requires at least low-level privileges, and produces only partial availability loss with no confidentiality or integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the RedHat security advisory at https://access.redhat.com/security/cve/CVE-2026-86564 and Bugzilla #2529682 for patched DPDK package versions; no exact fix version is specified in the available intelligence so an upstream fix version cannot be independently confirmed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today