Skip to main content
← All vulnerabilities
CVE-2026-86567

Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • grout

    Version range not reported

  • openvswitch3.5

    Version range not reported

  • openvswitch3.6

    Version range not reported

  • openvswitch2.11

    Version range not reported

  • openvswitch2.12

    Version range not reported

  • openvswitch2.13

    Version range not reported

  • openvswitch2.15

    Version range not reported

  • openvswitch2.16

    Version range not reported

  • openvswitch2.17

    Version range not reported

  • openvswitch3.1

    Version range not reported

  • grout

    Version range not reported

  • openvswitch2.17

    Version range not reported

  • openvswitch3.0

    Version range not reported

  • openvswitch3.1

    Version range not reported

  • openvswitch3.2

    Version range not reported

  • openvswitch3.3

    Version range not reported

  • openvswitch3.4

    Version range not reported

  • openvswitch3.5

    Version range not reported

  • openvswitch3.6

    Version range not reported

  • dpdk

    Version range not reported

  • dpdk

    Version range not reported

  • dpdk

    Version range not reported

  • openvswitch2.17

    Version range not reported

  • openvswitch3.0

    Version range not reported

  • openvswitch3.1

    Version range not reported

  • openvswitch

    Version range not reported

References 2

access.redhat.com

bugzilla.redhat.com