CVE-2026-86845
6.5 MEDIUMPublished 2026-10-14 · Updated 2026-10-15
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-825
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-102010
- MEDIUMCVE-2026-104034
- MEDIUMCVE-2026-104039
- MEDIUMCVE-2026-19939PoC
- MEDIUMCVE-2026-65970PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.