CVE-2026-100236
8.6HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-787
Impact
Remote attackers or guest VMs can trigger an out-of-bounds write or read, potentially crashing the service or executing code. They only need to send network packets processed by the software GSO path.
Root cause
The DPDK GSO library fails to validate packet header lengths against buffer sizes and can underflow the payload size calculation when headers exceed the configured segment size.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Fix & remediation
Upgrade DPDK packages once vendor errata is available. As an interim workaround, disable software GSO processing or rely on hardware offloading if supported.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.