Cpe:2.3:a:dpdk:data_plane_development_kit:*:*:*:*:*:*:*:*

CVE-2026-86848 is a critical out-of-bounds access vulnerability in DPDK lib/vhost vhost-crypto caused by a double-fetch of a guest descriptor index, enabling a malicious guest to compromise the host backend.