CVE-2026-86856
Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver
CVSS 3.1 6.5 MEDIUMCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-86856
PublishedA flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-86856 · CVE overview and exploitation status
cve-program · CVE-2026-86856
- https://access.redhat.com/errata/RHSA-2026:94629
- https://access.redhat.com/errata/RHSA-2026:94630
- https://access.redhat.com/errata/RHSA-2026:96083
- https://access.redhat.com/errata/RHSA-2026:98505
- https://access.redhat.com/errata/RHSA-2026:98616
- https://access.redhat.com/security/cve/CVE-2026-86856
- https://bugzilla.redhat.com/show_bug.cgi?id=2529897
Related changes
Linked by CVE identifier- Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver · Affected-version evidence changed · 11 Nov 2026
- Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver · Affected-version evidence changed · 11 Nov 2026
- Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver · Affected-version evidence changed · 9 Nov 2026
- Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver · Affected-version evidence changed · 6 Nov 2026
- Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver · Affected-version evidence changed · 3 Nov 2026