Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup

Summary

A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.

Timeline

1. Oct 14, 2026, 3:42 PM UTCCVE published
2. Oct 20, 2026, 1:36 AM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 20, 2026, 2:41 AM UTCRecord last updated

Affected versions

• grout

  Version range not reported

• openvswitch3.5

  Version range not reported

• openvswitch3.6

  Version range not reported

• openvswitch2.11

  Version range not reported

• openvswitch2.12

  Version range not reported

• openvswitch2.13

  Version range not reported

• openvswitch2.15

  Version range not reported

• openvswitch2.16

  Version range not reported

• openvswitch2.17

  Version range not reported

• openvswitch3.1

  Version range not reported

• grout

  Version range not reported

• openvswitch2.17

  Version range not reported

• openvswitch3.0

  Version range not reported

• openvswitch3.1

  Version range not reported

• openvswitch3.2

  Version range not reported

• openvswitch3.3

  Version range not reported

• openvswitch3.4

  Version range not reported

• openvswitch3.5

  Version range not reported

• openvswitch3.6

  Version range not reported

• dpdk

  Version range not reported

• dpdk

  Version range not reported

• dpdk

  Version range not reported

• openvswitch2.17

  Version range not reported

• openvswitch3.0

  Version range not reported

• openvswitch3.1

  Version range not reported

• openvswitch

  Version range not reported

References 2