CVE-2026-86845: falha de média gravidade em Red Hat Fast Datapath for RHEL 10
Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.2%
A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Red Hat · Fast Datapath for RHEL 10Red Hat · Fast Datapath for RHEL 8Red Hat · Fast Datapath for RHEL 9Red Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat OpenShift Container Platform 4Red Hat · Red Hat OpenStack Platform 13 (Queens)CVEs relacionadas — Red Hat Fast Datapath for RHEL 10
No mesmo produto, das mais perigosas para as menos.
CVE-2023-3966HIGHOpenvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packetEPSS 1.3%CVE-2023-3153MEDIUMService monitor mac flow is not rate limitedEPSS 1.0%CVE-2026-5367HIGHOvn: ovn: information disclosure via crafted dhcpv6 packetsEPSS 0.9%CVE-2024-2182MEDIUMOvn: insufficient validation of bfd packets may lead to denial of serviceEPSS 0.8%CVE-2026-5265MEDIUMOvn: ovn: heap over-read in icmp error response generationEPSS 0.6%CVE-2024-11614HIGHDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryEPSS 0.6%