Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Fast Datapath for RHEL 10 — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Fast Datapath for RHEL 10, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID Title CVSS Severity Published
CVE-2026-86849 Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto CWE-787 6.5 Medium 2026-10-14
CVE-2026-86856 Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver CWE-787 6.5 Medium 2026-10-14
CVE-2026-86847 Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup CWE-824 6.5 Medium 2026-10-14
CVE-2026-86846 Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto CWE-787 6.5 Medium 2026-10-14
CVE-2026-86845 Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup CWE-825 6.5 Medium 2026-10-14
CVE-2026-86566 Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings) CWE-191 6.5 Medium 2026-10-14
CVE-2026-86848 Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto CWE-367 8.8 High 2026-10-14
CVE-2026-86567 Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap CWE-416 8.8 High 2026-10-14
CVE-2026-100236 Dpdk: dpdk: heap out-of-bounds read/write in gso header copy CWE-787 8.6 High 2026-10-14
CVE-2026-86565 Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write CWE-787 8.2 High 2026-10-14
CVE-2026-86563 Dpdk: dpdk: double offset bug in vhost log mapping calculation CWE-131 7.8 High 2026-10-14
CVE-2026-86562 Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) CWE-362 7.8 High 2026-10-14
CVE-2026-86561 Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup CWE-770 6.5 Medium 2026-10-14
CVE-2026-93683 Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou CWE-367 6.4 Medium 2026-10-14
CVE-2026-86564 Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler CWE-125 3.3 Low 2026-09-08

All 15 known CVE vulnerabilities affecting Fast Datapath for RHEL 10 with full Chinese analysis, references, and POCs where available.