CVE-2026-86565: Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

Overview

Severity

Medium (CVSS 6.7)

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H/E:U

Exploit Status

Not Exploited

Patch Tuesday

2026-Oct

Released

2026-10-17

EPSS Score

0.17% (percentile: 5.6%)

Affected Products (1)

Other

• 17527-17084

Revision History

• 2026-10-17: Information published.