A vulnerability in the DPDK GSO library allows an attacker who can supply or influence network packets to trigger an out‑of‑bounds read or write. When the GSO routine copies packet headers into a new mbuf, it does not verify that the header fits within the source segment or the destination buffer. If a header is longer than the configured GSO segment size, the payload‑size calculation underflows, resulting in memory corruption that can be leveraged for code execution.

Affected components include Red Hat Fast Datapath for RHEL 8, 9, and 10, Red Hat Enterprise Linux 8, 9, and 10, Red Hat OpenShift Container Platform 4, and Red Hat OpenStack Platform 13 (Queens). The CVE does not list specific version numbers; users should review the referenced Red Hat advisory for precise impacted releases.

The CVSS score is 8.6, indicating high severity. The EPSS score is <1%, indicating a very low but non-zero exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to send malicious or crafted packets to a host that processes GSO, either through direct network access or via a guest in a virtualized environment. Once memory corruption occurs, an attacker may gain arbitrary code execution or cause a denial of service. The attack vector is inferred to be remote or guest‑supplied packets based on the description, and sufficient privileges to trigger the GSO logic are required.