Memory Access Vulnerability in DPDK Vhost Implementation
CVE-2026-86563

7.8HIGH

Key Information:

Vendor

Red Hat
Status
Fast Datapath For Rhel 10
Fast Datapath For Rhel 8
Fast Datapath For Rhel 9
Red Hat Enterprise Linux 10
Vendor
CVE Published:
14 October 2026

What is CVE-2026-86563?

A vulnerability exists within the DPDK Vhost implementation due to a flawed calculation in the vhost log mapping process, specifically a double-offset bug. This flaw can potentially result in incorrect memory access, leading to significant security concerns for systems utilizing the DPDK framework. Proper mitigation steps should be explored to safeguard against this anomaly.

References

https://access.redhat.com/security/cve/CVE-2026-86563
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2529668
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Anthropic Research for reporting this issue.
.