CVE-2026-86847Medium· 6.5▾ SunlitA flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
0.2% → 0.2%
A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98759Medium· 6.8kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() (CVE-2026-98759)
CVE-2026-98760Medium· 6.1kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (CVE-2026-98760)
CVE-2026-98793Medium· 4.4kernel: netfilter: bpf: reject invalid NAT manipulation types (CVE-2026-98793)
CVE-2026-74355Medium· 5.5kernel: iommu/vt-d: Fix RB-tree corruption in probe error path (CVE-2026-74355)
CVE-2026-80586High· 8.3kernel: mptcp: options: reset DSS fields in case of unexpected size (CVE-2026-80586)
CVE-2026-80707Medium· 5.5kernel: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer (CVE-2026-80707)