CVE-2026-74312

A flaw was found in the Linux kernel's vhost/vdpa subsystem. Improper validation of the virtqueue index in the vhost_vdpa_mmap() and vhost_vdpa_fault() functions allows an out-of-range index to be used. This can lead to an out-of-bounds memory access in driver-specific callbacks, potentially causing invalid Page Frame Number (PFN) remaps, system crashes, or a Denial of Service (DoS).

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local access with permissions to interact with vhost-vDPA character devices, which are typically restricted to privileged virtualization processes. While an out-of-range queue index can trigger out-of-bounds memory accesses within underlying driver callbacks, the primary blast radius is limited to a system crash and denial of service rather than arbitrary code execution or privilege escalation. Systems that do not configure or expose vDPA acceleration to untrusted users remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.