CVE-2026-100236

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Peaked 1d ago at 1 mentions (2026-10-14); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Full discourse2 posts

VulDB 🛡@vuldb17h
⚠️ A new vulnerability with increased severity was disclosed for Red Hat Enterprise Linux and other products (CVE-2026-100236) vuldb.com/vuln/420087 https://t.co/OJnxFBjbrE
0000054
2.3K followersView on X
Upwind Security MDR@UpwindMDR1d
🚨High - DPDK GSO Header Underflow OOB R/W in Software Segmentation (CVE-2026-100236) In DPDK’s GSO (software) path, packet headers are copied into a new mbuf without verifying they fit the source first segment or destination buffer; if header_len > configured GSO segment size, payload-size calc underflows, leading to out-of-bounds read/write from remote/guest-supplied packets. Hardware/offload GSO paths are not impacted. 👉Affected: grout + openvswitch (2.11/2.12/2.17/3.0/3.1/3.5/3.6) and dpdk packages with software GSO enabled. Upgrade to DPDK 23.11.8 / 24.11.8 / 25.11.4+ (or vendor equivalent when released).
0000050
321 followersView on X

Explore more

Back to dashboard