CVE-2026-100236

Fixed in a distro release EPSS <1%CVSS 8.6

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.

Published 2026-10-14 · CVE record · OSV

Products: Red Hat Fast Datapath for RHEL 10, Red Hat Fast Datapath for RHEL 8, Red Hat Fast Datapath for RHEL 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4, Red Hat OpenStack Platform 13 (Queens)

Distro releases