SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-86564

LOW · CVSS 3.3 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-13

CyberRota Analysis

AI-Generated

A vulnerability exists in the DPDK library's virtio-net control-queue handler due to inadequate length validation before accessing command_data, potentially leading to out-of-bounds reads and crashes of the host process. While the severity is classified as low, organizations utilizing DPDK should prioritize this issue to prevent potential service disruptions.

CVE
CVE-2026-86564
Severity
LOW
CVSS
3.3
EPSS
0.10%

Original NVD Description

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.