CVE-2026-86848
EUVD-2026-10150714.10.2026, 18:19
A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend.
Awaiting analysis
This vulnerability is currently awaiting analysis.
Debian Releases