CVE-2026-86846
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Oct 14, 2026
Vendor
unknown
Description
A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend.