CVE-2026-86562
EUVD-2026-10142114.10.2026, 17:20
A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler.
Awaiting analysis
This vulnerability is currently awaiting analysis.
Debian Releases