CVE-2026-86847
Medium · 6.5CVSS
6.5
EPSS
0.2%
Published
Oct 14, 2026
CISA due date
—
The record
A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115327 libyang through 6.4.13 contains an uninitialized pointer free vulnerability in… CWE-824
- CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-824
- CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-824
- CVE-2026-110602 libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in… CWE-824
- CVE-2026-88054 Tesseract is an open source OCR engine. CWE-824
- CVE-2026-54920 OpenEXR is the reference implementation and specification for the EXR image format… CWE-824
- CVE-2026-16409 Invalid pointer in the Security: PSM component. CWE-824
- CVE-2026-16353 Invalid pointer in the DOM: Bindings (WebIDL) component. CWE-824