Riskcovery

CVE-2026-86845

Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup

State
Published
Severity
6.5 Medium
Published
Oct 14, 2026
Updated
Oct 15, 2026
Reserved
Sep 8, 2026

Read the record on cve.org

Description

A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hredhat

Weaknesses

  • CWE-825 Expired Pointer Dereference

Affected Products

ProductVersions
Fast Datapath for RHEL 10Red Hat
    Fast Datapath for RHEL 10Red Hat
      Fast Datapath for RHEL 10Red Hat
        Fast Datapath for RHEL 8Red Hat
          Fast Datapath for RHEL 8Red Hat
            Fast Datapath for RHEL 8Red Hat
              Fast Datapath for RHEL 8Red Hat
                Fast Datapath for RHEL 8Red Hat
                  Fast Datapath for RHEL 8Red Hat
                    Fast Datapath for RHEL 8Red Hat
                      Fast Datapath for RHEL 9Red Hat
                        Fast Datapath for RHEL 9Red Hat
                          Fast Datapath for RHEL 9Red Hat
                            Fast Datapath for RHEL 9Red Hat
                              Fast Datapath for RHEL 9Red Hat
                                Fast Datapath for RHEL 9Red Hat
                                  Fast Datapath for RHEL 9Red Hat
                                    Fast Datapath for RHEL 9Red Hat
                                      Fast Datapath for RHEL 9Red Hat
                                        Red Hat Enterprise Linux 10Red Hat
                                          Red Hat Enterprise Linux 8Red Hat
                                            Red Hat Enterprise Linux 9Red Hat
                                              Red Hat OpenShift Container Platform 4Red Hat
                                                Red Hat OpenShift Container Platform 4Red Hat
                                                  Red Hat OpenShift Container Platform 4Red Hat
                                                    Red Hat OpenStack Platform 13 (Queens)Red Hat

                                                      References

                                                      Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.