{"schema_version":1,"title":"DPDK vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in DPDK: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86849, was published on 14 October 2026. 10 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/dpdk","json_url":"https://junglewise.ai/threats/technologies/dpdk.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/dpdk","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":10,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2026-86849","cvss":6.5,"epss":0.0013,"slug":"cve-2026-86849-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-integer-overflow","title":"DPDK vhost-crypto integer overflow in lib/vhost","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:19.4+00:00","url":"https://junglewise.ai/threats/cve-2026-86849-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-integer-overflow"},{"cve":"CVE-2026-86848","cvss":8.8,"epss":0.0011,"slug":"cve-2026-86848-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-the-indirect","title":"DPDK vhost-crypto indirect-descriptor double-fetch out-of-bounds","severity":"high","exploited":false,"published_at":"2026-10-14T18:19:19.223+00:00","url":"https://junglewise.ai/threats/cve-2026-86848-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-the-indirect"},{"cve":"CVE-2026-86847","cvss":6.5,"epss":0.0016,"slug":"cve-2026-86847-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-write-back-chain","title":"DPDK vhost-crypto uninitialized pointer in write-back chain","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:19.04+00:00","url":"https://junglewise.ai/threats/cve-2026-86847-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-write-back-chain"},{"cve":"CVE-2026-86846","cvss":6.5,"epss":0.0016,"slug":"cve-2026-86846-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-a-guest-can","title":"DPDK vhost-crypto out-of-bounds write via unchecked descriptor index","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:18.863+00:00","url":"https://junglewise.ai/threats/cve-2026-86846-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-a-guest-can"},{"cve":"CVE-2026-86567","cvss":8.8,"epss":0.0014,"slug":"cve-2026-86567-a-flaw-was-found-in-dpdk-lib-vhost-the-vduse-handler-fails-to","title":"DPDK lib/vhost use-after-free in VDUSE handler","severity":"high","exploited":false,"published_at":"2026-10-14T18:19:18.39+00:00","url":"https://junglewise.ai/threats/cve-2026-86567-a-flaw-was-found-in-dpdk-lib-vhost-the-vduse-handler-fails-to"},{"cve":"CVE-2026-86566","cvss":6.5,"epss":0.0013,"slug":"cve-2026-86566-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-with-runt-rx","title":"DPDK lib/vhost integer underflow in RX descriptor processing","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:18.203+00:00","url":"https://junglewise.ai/threats/cve-2026-86566-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-with-runt-rx"},{"cve":"CVE-2026-86565","cvss":8.2,"epss":0.0016,"slug":"cve-2026-86565-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-can-desynchronize","title":"DPDK lib/vhost out-of-bounds write in virtqueue handling","severity":"high","exploited":false,"published_at":"2026-10-14T17:20:05.77+00:00","url":"https://junglewise.ai/threats/cve-2026-86565-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-can-desynchronize"},{"cve":"CVE-2026-86562","cvss":7.8,"epss":0.0018,"slug":"cve-2026-86562-a-flaw-was-found-in-dpdk-lib-vhost-a-toctou-double-fetch-of","title":"DPDK lib/vhost heap buffer overflow in control-queue handler","severity":"high","exploited":false,"published_at":"2026-10-14T17:20:05.42+00:00","url":"https://junglewise.ai/threats/cve-2026-86562-a-flaw-was-found-in-dpdk-lib-vhost-a-toctou-double-fetch-of"},{"cve":"CVE-2026-93683","cvss":6.4,"epss":0.001,"slug":"cve-2026-93683-a-flaw-was-found-in-the-dpdk-vhost-library-when-handling-a-virtio","title":"DPDK vhost indirect descriptor table out-of-bounds access","severity":"medium","exploited":false,"published_at":"2026-10-14T16:17:57.227+00:00","url":"https://junglewise.ai/threats/cve-2026-93683-a-flaw-was-found-in-the-dpdk-vhost-library-when-handling-a-virtio"},{"cve":"CVE-2026-86561","cvss":6.5,"epss":0.0016,"slug":"cve-2026-86561-a-flaw-was-found-in-dpdk-lib-vhost-memory-size-is-not-adequately","title":"DPDK lib/vhost memory validation flaw leading to crash","severity":"medium","exploited":false,"published_at":"2026-10-14T16:17:54.613+00:00","url":"https://junglewise.ai/threats/cve-2026-86561-a-flaw-was-found-in-dpdk-lib-vhost-memory-size-is-not-adequately"},{"cve":"CVE-2026-86564","cvss":3.3,"epss":0.0014,"slug":"cve-2026-86564-dpdk-lib-vhost-out-of-bounds-read-in-virtio-net-control-queue","title":"DPDK lib/vhost out-of-bounds read in virtio-net control-queue handler","severity":"low","exploited":false,"published_at":"2026-09-08T23:17:30.083+00:00","url":"https://junglewise.ai/threats/cve-2026-86564-dpdk-lib-vhost-out-of-bounds-read-in-virtio-net-control-queue"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":10},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"DPDK","slug":"dpdk","vendor":{"hub":true,"name":"DPDK","slug":"dpdk","url":"https://junglewise.ai/threats/vendors/dpdk"},"aliases":[],"category":"library","description":"DPDK is a set of C libraries and drivers for fast packet processing in data plane applications.","url":"https://junglewise.ai/threats/technologies/dpdk"},"most_severe":[{"cve":"CVE-2026-86567","cvss":8.8,"epss":0.0014,"slug":"cve-2026-86567-a-flaw-was-found-in-dpdk-lib-vhost-the-vduse-handler-fails-to","title":"DPDK lib/vhost use-after-free in VDUSE handler","severity":"high","exploited":false,"published_at":"2026-10-14T18:19:18.39+00:00","url":"https://junglewise.ai/threats/cve-2026-86567-a-flaw-was-found-in-dpdk-lib-vhost-the-vduse-handler-fails-to"},{"cve":"CVE-2026-86848","cvss":8.8,"epss":0.0011,"slug":"cve-2026-86848-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-the-indirect","title":"DPDK vhost-crypto indirect-descriptor double-fetch out-of-bounds","severity":"high","exploited":false,"published_at":"2026-10-14T18:19:19.223+00:00","url":"https://junglewise.ai/threats/cve-2026-86848-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-the-indirect"},{"cve":"CVE-2026-86565","cvss":8.2,"epss":0.0016,"slug":"cve-2026-86565-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-can-desynchronize","title":"DPDK lib/vhost out-of-bounds write in virtqueue handling","severity":"high","exploited":false,"published_at":"2026-10-14T17:20:05.77+00:00","url":"https://junglewise.ai/threats/cve-2026-86565-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-can-desynchronize"},{"cve":"CVE-2026-86562","cvss":7.8,"epss":0.0018,"slug":"cve-2026-86562-a-flaw-was-found-in-dpdk-lib-vhost-a-toctou-double-fetch-of","title":"DPDK lib/vhost heap buffer overflow in control-queue handler","severity":"high","exploited":false,"published_at":"2026-10-14T17:20:05.42+00:00","url":"https://junglewise.ai/threats/cve-2026-86562-a-flaw-was-found-in-dpdk-lib-vhost-a-toctou-double-fetch-of"},{"cve":"CVE-2026-86847","cvss":6.5,"epss":0.0016,"slug":"cve-2026-86847-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-write-back-chain","title":"DPDK vhost-crypto uninitialized pointer in write-back chain","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:19.04+00:00","url":"https://junglewise.ai/threats/cve-2026-86847-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-write-back-chain"},{"cve":"CVE-2026-86846","cvss":6.5,"epss":0.0016,"slug":"cve-2026-86846-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-a-guest-can","title":"DPDK vhost-crypto out-of-bounds write via unchecked descriptor index","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:18.863+00:00","url":"https://junglewise.ai/threats/cve-2026-86846-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-a-guest-can"},{"cve":"CVE-2026-86561","cvss":6.5,"epss":0.0016,"slug":"cve-2026-86561-a-flaw-was-found-in-dpdk-lib-vhost-memory-size-is-not-adequately","title":"DPDK lib/vhost memory validation flaw leading to crash","severity":"medium","exploited":false,"published_at":"2026-10-14T16:17:54.613+00:00","url":"https://junglewise.ai/threats/cve-2026-86561-a-flaw-was-found-in-dpdk-lib-vhost-memory-size-is-not-adequately"},{"cve":"CVE-2026-86849","cvss":6.5,"epss":0.0013,"slug":"cve-2026-86849-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-integer-overflow","title":"DPDK vhost-crypto integer overflow in lib/vhost","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:19.4+00:00","url":"https://junglewise.ai/threats/cve-2026-86849-a-flaw-was-found-in-dpdk-lib-vhost-vhost-crypto-integer-overflow"},{"cve":"CVE-2026-86566","cvss":6.5,"epss":0.0013,"slug":"cve-2026-86566-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-with-runt-rx","title":"DPDK lib/vhost integer underflow in RX descriptor processing","severity":"medium","exploited":false,"published_at":"2026-10-14T18:19:18.203+00:00","url":"https://junglewise.ai/threats/cve-2026-86566-a-flaw-was-found-in-dpdk-lib-vhost-a-guest-with-runt-rx"},{"cve":"CVE-2026-93683","cvss":6.4,"epss":0.001,"slug":"cve-2026-93683-a-flaw-was-found-in-the-dpdk-vhost-library-when-handling-a-virtio","title":"DPDK vhost indirect descriptor table out-of-bounds access","severity":"medium","exploited":false,"published_at":"2026-10-14T16:17:57.227+00:00","url":"https://junglewise.ai/threats/cve-2026-93683-a-flaw-was-found-in-the-dpdk-vhost-library-when-handling-a-virtio"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}