AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

Red HatCVE-2026-100236

Red Hat DPDK GSO: out-of-bounds read

Red Hat

CVE-2026-100236 · Published Oct 14, 2026 · updated Nov 4, 2026

High8.6
No fix yet
Red Hat advisory

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.

Affected versions

PackageAffectedFixed in
Fast Datapath for RHEL 10
Product
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
Fast Datapath for RHEL 8
Product
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
all versionsNo fix yet
Details and references

More Red Hat advisories

All Red Hat