Dpdk: dpdk: time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto

Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap

Dpdk: dpdk: heap out-of-bounds read/write in gso header copy

Ovn: ovn: information disclosure via crafted dhcpv6 packets

Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

Dpdk: dpdk: double offset bug in vhost log mapping calculation

Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse)

Dpdk: dpdk: integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto

Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa driver

Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup

Dpdk: dpdk: guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto

Dpdk: dpdk: guest-triggered use-after-free and type confusion in vhost-crypto session cleanup

Dpdk: dpdk: guest with runt rx descriptors underflows copy length in vhost enqueue (split and packed rings)

Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup

Ovn: ovn: heap over-read in icmp error response generation

Ovn: insufficient validation of bfd packets may lead to denial of service

Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handler