CVE-2026-86856

A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.

This issue affects the DPDK nfp vDPA driver in DPDK 24.11 and later. No fixed version is available yet (patches are under review). The nfp vDPA PMD was introduced in DPDK 23.11; confirm whether 23.11 LTS is also affected before marking that stream not affected. A guest with access to an NFP vDPA device (class=vdpa) can trigger the overflow. Red Hat has rated this as having a security impact of Important.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid using the nfp vDPA driver in production until patched. Do not attach untrusted guests to an NFP VF running with class=vdpa.