PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-86567 Red Hat CVE debrief

A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap. This issue affects various Red Hat products, including Fast Datapath for RHEL 8, 9, and 10, as well as Red Hat Enterprise Linux 8, 9, and 10, and Red Hat OpenShift Container Platform 4. The vulnerability class is related to improper handling of IOTLB invalidation, which can lead to use-after-unmap issues. The source confidence is high based on the CVE record and source item. Defenders should review the context and assess the exposure of their environments.

Vendor
Red Hat
Product
Fast Datapath for RHEL 10
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-15
Advisory published
2026-10-14
Advisory updated
2026-10-15

Who should care

Defenders responsible for Red Hat products, especially those using Fast Datapath for RHEL 8, 9, and 10, as well as Red Hat Enterprise Linux 8, 9, and 10, and Red Hat OpenShift Container Platform 4, should assess exposure and prioritize verification and potential updates.

Why it matters

CVE-2026-86567 affects Red Hat products, including Fast Datapath for RHEL 8, 9, and 10, as well as Red Hat Enterprise Linux 8, 9, and 10, and Red Hat OpenShift Container Platform 4. Defenders should prioritize verifying exposure and assessing the need for updates or patches.

  • Verify exposure in environments using affected Red Hat products
  • Assess the need for updates or patches to prevent use-after-unmap issues
  • Monitor for potential issues related to invalidated vring pointers

Technical summary

The VDUSE handler in DPDK lib/vhost fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap. This issue affects various Red Hat products, including Fast Datapath for RHEL 8, 9, and 10, as well as Red Hat Enterprise Linux 8, 9, and 10, and Red Hat OpenShift Container Platform 4.

Defensive priority

Defenders should prioritize verifying exposure in their environments, especially those using affected Red Hat products, and assess the need for updates or patches.

Recommended defensive actions

  • Verify exposure in environments using affected Red Hat products
  • Assess the need for updates or patches
  • Monitor for potential use-after-unmap issues

Evidence notes

The CVE record and source item provide details on the vulnerability in DPDK lib/vhost, but specific version information and exploitation details are not provided.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-86567 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-86567

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-86567 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-86567

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.