Red Hat Security Advisory

RHSA-2026:94630

dpdk security update

Released 2026-11-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) dpdk-2:25.11-2.el10_2, dpdk-devel-2:25.11-2.el10_2, dpdk-doc-2:25.11-2.el10_2 +1

Fixes 14 records

TI-2026-74176 CVE-2026-100236 · GHSA-62fj-4whq-8247

Out-of-bounds write in DPDK GSO header copy

MEDIUM 43

A flaw was found in the DPDK GSO library.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00403 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-787

TI-2026-74386 CVE-2026-86848 · GHSA-rr86-5jrg-p5m3

DPDK vhost-crypto race condition enables out-of-bounds host access

LOW 39

A flaw was found in DPDK lib/vhost vhost-crypto.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00105 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-367

TI-2026-74382 CVE-2026-86567 · GHSA-88xm-vmg5-3cxm

DPDK VDUSE handler use-after-unmap after IOTLB invalidation

LOW 39

A flaw was found in DPDK lib/vhost.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00191 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-416

TI-2026-74329 CVE-2026-86565 · GHSA-frh8-6rpp-rx74

Out-of-bounds write in DPDK vhost lets guests corrupt host memory

LOW 37

A flaw was found in DPDK lib/vhost.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0017 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-787

TI-2026-74328 CVE-2026-86563 · GHSA-rwfr-j35x-6746

Double offset in DPDK vhost log mapping causes wrong memory access

LOW 35

A flaw was found in DPDK lib/vhost.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00199 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-131

TI-2026-74327 CVE-2026-86562 · GHSA-x59g-22jw-gfvw

Double-fetch race in DPDK vhost VDUSE control queue overflows heap

LOW 35

A flaw was found in DPDK lib/vhost.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00178 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-362

TI-2026-74388 CVE-2026-86856 · GHSA-hw7m-fvc7-m65f

Stack and heap buffer overflow in DPDK nfp vDPA driver

LOW 28

A flaw was found in the DPDK nfp vDPA driver.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00171 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-787

TI-2026-74387 CVE-2026-86849 · GHSA-r5jx-c73w-845m

Host buffer overflow in DPDK vhost-crypto backend

LOW 28

A flaw was found in DPDK lib/vhost vhost-crypto.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-787

TI-2026-74385 CVE-2026-86847 · GHSA-88x8-5995-vmmf

Uninitialized pointer use in DPDK vhost-crypto write-back cleanup

LOW 28

A flaw was found in DPDK lib/vhost vhost-crypto.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00199 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-824

TI-2026-74384 CVE-2026-86846 · GHSA-7w2x-cjwh-h7x7

Out-of-bounds write in DPDK vhost-crypto triggered by guests

LOW 28

A flaw was found in DPDK lib/vhost vhost-crypto.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00193 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-787

TI-2026-74383 CVE-2026-86845 · GHSA-7ww6-vqp6-25qm

Use-after-free and type confusion in DPDK vhost-crypto backend

LOW 28

A flaw was found in DPDK lib/vhost vhost-crypto.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00166 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-825

TI-2026-74381 CVE-2026-86566 · GHSA-qff6-4mmg-g5c9

Integer underflow in DPDK vhost enqueue enables denial of service

LOW 28

A flaw was found in DPDK lib/vhost.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00171 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-191

TI-2026-74036 CVE-2026-86561 · GHSA-pwj5-mm8f-mm4p

Missing size validation before mmap in DPDK vhost memory setup

LOW 28

A flaw was found in DPDK lib/vhost.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00193 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-770

TI-2026-74057 CVE-2026-93683 · GHSA-vg6x-f7m9-xx3h

DPDK vhost out-of-bounds walk via indirect descriptor length TOCTOU

LOW 27

A flaw was found in the DPDK vhost library.

CVSS 3.1MEDIUM 6.4 Local Low privileges No interaction EPSS 0.00111 Published 2026-10-14 Partial fix · 2:25.11-2.el10_2, 2:25.11-2.el9_8 CWE-367