The vulnerability is a time‑of‑check/time‑of‑use flaw in the DPDK lib/vhost vhost‑crypto component. An attacker with control over a guest can trigger a double‑fetch of a guest descriptor next index, which causes the host backend to perform an out‑of‑bounds write. This flaw could lead to memory corruption, potential denial of service, or privilege escalation if the attacker can influence host memory contents. It is identified as CWE‑367, a race condition flaw.

Affected products include Red Hat Fast Datapath for RHEL 8, 9, and 10, Red Hat Enterprise Linux 8, 9, and 10, Red Hat OpenShift Container Platform 4, and Red Hat OpenStack Platform 13 (Queens). The specific affected versions are not enumerated in the advisory, so any installation of these components that has not been updated to a release containing the patch is potentially vulnerable.

The vulnerability has a CVSS score of 8.8, indicating high impact. EPSS data is unavailable, so the exact exploitation likelihood cannot be quantified, but the presence of a TOCTOU race and the high CVSS imply it should be considered a serious threat. The vulnerability is not listed in CISA KEV. An attacker would need to run a malicious guest that targets a vhost‑crypto vhost‑user instance, expose the double‑fetch condition, and trigger the write. The likely attack vector is from a guest to the host within a virtualized environment, making prompt mitigation essential.