A double‑offset bug in the log mapping calculation within the DPDK lib/vhost component can result in incorrect memory access. This flaw, classified as CWE‑131, allows an attacker to corrupt memory, which may enable arbitrary code execution or cause denial of service by crashing the affected process.

The vulnerability affects Red Hat Fast Datapath for Red Hat Enterprise Linux 8, 9 and 10, as well as the core RHEL platforms 8, 9 and 10, Red Hat OpenShift Container Platform 4, and Red Hat OpenStack Platform 13 (Queens). All released versions of these products may be impacted.

The CVSS score of 7.8 indicates a high severity assessment. EPSS score of < 1%, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly documented, but the issue arises from the virtual host log mapping routine, suggesting that exploitation would likely involve interacting with VHOST interfaces or injected traffic. In the absence of a public exploit, the risk remains theoretical, yet the potential for local memory corruption warrants monitoring and timely remediation once a vendor update is released.