CVE-2026-86845
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Oct 14, 2026
Vendor
unknown
Description
A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.