[Git][security-tracker-team/security-tracker][master] Add new dpdk issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Oct 14 21:23:59 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b6b0e46a by Salvatore Bonaccorso at 2026-10-14T22:23:32+02:00
Add new dpdk issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,7 +19,9 @@ CVE-2026-94200 (Improper Validation of Consistency within Input vulnerability in
 CVE-2026-94197 (An authentication and authorization bypass vulnerability exists in F5  ...)
 	NOT-FOR-US: F5
 CVE-2026-93683 (A flaw was found in the DPDK vhost library. When handling a virtio ind ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2046
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-93637 (An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1 ...)
 	NOT-FOR-US: Zimbra
 CVE-2026-93635 (LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10. ...)
@@ -97,29 +99,53 @@ CVE-2026-88164 (Missing authorization in Microsoft Office SharePoint allows an a
 CVE-2026-87093 (Incorrect Permission Assignment for Critical Resource vulnerability in ...)
 	NOT-FOR-US: Progress Software
 CVE-2026-86856 (A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers s ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2027
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86849 (A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in c ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2022
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86848 (A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descript ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2001
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2026
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86847 (A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain clea ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2023
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86846 (A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an ...)
 	TODO: check
 CVE-2026-86845 (A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can l ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2028
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86567 (A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalid ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2029
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86566 (A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors c ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2020
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86565 (A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueu ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2008
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86563 (A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log m ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2004
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86562 (A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-q ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2003
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2021
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86561 (A flaw was found in DPDK lib/vhost. Memory size is not adequately vali ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2002
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-86476 (A flaw was found in gst-plugins-base. A heap buffer overflow can be tr ...)
 	TODO: check
 CVE-2026-86461 (The FV Flowplayer Video Player plugin for WordPress is vulnerable to L ...)
@@ -1041,7 +1067,9 @@ CVE-2026-100404 (Zulip is an open-source team collaboration tool. In Zulip Serve
 CVE-2026-100394 (Nezha Monitoring is a self-hostable, lightweight, servers and websites ...)
 	TODO: check
 CVE-2026-100236 (A flaw was found in the DPDK GSO library. When software GSO copies pac ...)
-	TODO: check
+	- dpdk 25.11.4-1
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2047
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-100231 (A flaw was found in the GStreamer multimedia framework's ASF muxer plu ...)
 	TODO: check
 CVE-2026-100229 (A flaw was found in GStreamer's H.266 codec parser library (libgstcode ...)
@@ -52387,10 +52415,12 @@ CVE-2026-87050
 CVE-2026-87049
 	NOT-FOR-US: operator-foundry
 CVE-2026-86564 (A flaw was found in DPDK lib/vhost. Missing length validation before r ...)
-	- dpdk <unfixed> (bug #1147518)
+	- dpdk 25.11.4-1 (bug #1147518)
 	[trixie] - dpdk <no-dsa> (Minor issue)
 	[bookworm] - dpdk <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2529682
+	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=2007
+	NOTE: https://www.openwall.com/lists/oss-security/2026/10/14/7
 CVE-2026-85630 (HTML::FormHandler versions before 0.410002 for Perl render field attri ...)
 	- libhtml-formhandler-perl 0.410002-1 (bug #1147198)
 	[trixie] - libhtml-formhandler-perl <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6b0e46a64c454d06286b51e1ca33fe579521887

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6b0e46a64c454d06286b51e1ca33fe579521887
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/8f02cfb0/attachment.htm>

More information about the debian-security-tracker-commits mailing list