CVE-2026-100236

Name of the Vulnerable Software and Affected Versions DPDK versions prior to 23.11.8 DPDK versions prior to 24.11.8 DPDK versions prior to 25.11.4 openvswitch versions 2.11, 2.12, 2.17, 3.0, 3.1, 3.5, and 3.6

Description A flaw exists in the DPDK GSO library during software segmentation. When copying packet headers into a new mbuf, the system fails to verify if the header fits within the source first segment or the destination buffer. If the header length exceeds the configured GSO segment size, the payload-size calculation underflows. This allows a remote or guest-supplied packet to trigger an out-of-bounds read or write. Hardware and offload GSO paths are not affected.

Recommendations Update DPDK to version 23.11.8 or newer. Update DPDK to version 24.11.8 or newer. Update DPDK to version 25.11.4 or newer. Disable software GSO in DPDK packages as a temporary mitigation measure.