ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-86565

Red Hat Enterprise Linux 10 · Vulnerability

CVSS 3.1 8.2 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 9 Nov 2026 11:02:10 UTC. Read the latest advisory.

cve-program · CVE-2026-86565

Published

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-86565

Published

Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.

Source published: 14 Oct 2026 16:08:22 UTC
Source modified: 9 Nov 2026 09:45:29 UTC
Saved here: 9 Nov 2026 11:02:10 UTC
Source terms: CVE Program Terms of Use

Original source record · Cite this exact observation · Complete original publisher JSON

Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.

CVSS 3.1 · 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H