{"id":"DEBIAN-CVE-2026-86563","details":"A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access.","modified":"2026-10-15T05:01:35.907518668Z","published":"2026-10-14T17:20:05.600Z","upstream":["CVE-2026-86563"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-86563"}],"affected":[{"package":{"name":"dpdk","ecosystem":"Debian:12","purl":"pkg:deb/debian/dpdk?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.11.1-2","22.11.11-0+deb12u1","22.11.2-1","22.11.2-2","22.11.2-2~deb12u1","22.11.2-3","22.11.3-1","22.11.3-1~deb12u1","22.11.3-2","22.11.4-1~deb12u1","22.11.5-1~deb12u1","22.11.6-1~deb12u1","22.11.7-1~deb12u1","22.11.8-1~deb12u1","22.11.9-1~deb12u1","23.11-1","23.11-1~exp1","23.11.1-1","23.11.1-2","23.11.2-1","23.11.2-1+exp1","23.11.2-1+exp2","23.11.2-1+exp3","23.11.2-1+exp4","23.11.2-2","23.11.2-3","24.11-1","24.11-2","24.11.1-1","24.11.2-1","24.11.2-2","24.11.3-1","24.11.3-1~deb13u1","24.11.3-2","24.11~rc2-1","24.11~rc2-2","24.11~rc3-1","24.11~rc4-1","25.11-1","25.11-2","25.11.1-1","25.11.2-1","25.11.3-1","25.11.4-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-86563.json"}},{"package":{"name":"dpdk","ecosystem":"Debian:13","purl":"pkg:deb/debian/dpdk?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["24.11.2-2","24.11.3-1","24.11.3-1~deb13u1","24.11.3-2","24.11.4-0+deb13u1","25.11-1","25.11-2","25.11.1-1","25.11.2-1","25.11.3-1","25.11.4-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-86563.json"}},{"package":{"name":"dpdk","ecosystem":"Debian:14","purl":"pkg:deb/debian/dpdk?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["24.11.2-2","24.11.3-1","24.11.3-1~deb13u1","24.11.3-2","25.11-1","25.11-2","25.11.1-1","25.11.2-1","25.11.3-1","25.11.4-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-86563.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}