← CVE Intelligence

CVE-2026-100236

Dpdk: dpdk: heap out-of-bounds read/write in gso header copy PUBLISHED

Description (CNA)

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.

Affected (CNA)

Vendor / productVersions
Red Hat / Fast Datapath for RHEL 10affected
Red Hat / Fast Datapath for RHEL 10affected
Red Hat / Fast Datapath for RHEL 10affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 8affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Fast Datapath for RHEL 9affected
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenStack Platform 13 (Queens)affected

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.