{"id":"DEBIAN-CVE-2026-100236","details":"A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.","modified":"2026-10-23T17:47:25.958330254Z","published":"2026-10-14T17:17:44.833Z","upstream":["CVE-2026-100236"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-100236"}],"affected":[{"package":{"name":"dpdk","ecosystem":"Debian:12","purl":"pkg:deb/debian/dpdk?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.11.1-2","22.11.11-0+deb12u1","22.11.2-1","22.11.2-2","22.11.2-2~deb12u1","22.11.2-3","22.11.3-1","22.11.3-1~deb12u1","22.11.3-2","22.11.4-1~deb12u1","22.11.5-1~deb12u1","22.11.6-1~deb12u1","22.11.7-1~deb12u1","22.11.8-1~deb12u1","22.11.9-1~deb12u1","23.11-1","23.11-1~exp1","23.11.1-1","23.11.1-2","23.11.2-1","23.11.2-1+exp1","23.11.2-1+exp2","23.11.2-1+exp3","23.11.2-1+exp4","23.11.2-2","23.11.2-3","24.11-1","24.11-2","24.11.1-1","24.11.2-1","24.11.2-2","24.11.3-1","24.11.3-1~deb13u1","24.11.3-2","24.11~rc2-1","24.11~rc2-2","24.11~rc3-1","24.11~rc4-1","25.11-1","25.11-2","25.11.1-1","25.11.2-1","25.11.3-1","25.11.4-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-100236.json"}},{"package":{"name":"dpdk","ecosystem":"Debian:13","purl":"pkg:deb/debian/dpdk?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["24.11.2-2","24.11.3-1","24.11.3-1~deb13u1","24.11.3-2","24.11.4-0+deb13u1","25.11-1","25.11-2","25.11.1-1","25.11.2-1","25.11.3-1","25.11.4-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-100236.json"}},{"package":{"name":"dpdk","ecosystem":"Debian:14","purl":"pkg:deb/debian/dpdk?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.11.4-1"}]}],"versions":["24.11.2-2","24.11.3-1","24.11.3-1~deb13u1","24.11.3-2","25.11-1","25.11-2","25.11.1-1","25.11.2-1","25.11.3-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-100236.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"}]}