An integer overflow in the DPDK vhost-crypto chain length checks and a missing length validation on the RSA path can overflow a host buffer when a vhost-crypto backend processes data from a guest. This overflow corrupts host memory and can lead to arbitrary code execution or denial of service. The weakness is a classic buffer overflow (CWE-787).

The flaw affects Red Hat Fast Datapath for RHEL 8, 9 and 10, the Red Hat Enterprise Linux 10, 8, 9 kernels, OpenShift Container Platform 4, and OpenStack Platform 13 (Queens). Versions containing the Lib/vhost module before the Red Hat provided patch are vulnerable. The advisory lists the affected Fast Datapath and core RHEL distributions but does not specify exact revision numbers.

The CVSS score of 6.5 indicates a moderate severity, and the EPSS score is less than 1%. The flaw is not listed in the CISA KEV catalog. The likely attack vector is a guest that sends crafted data to a virtio-crypto vhost-user backend on the host. Once the overflow is triggered, a malicious guest can corrupt host memory, potentially achieving remote code execution or causing service disruption. This makes the vulnerability a high-impact host-level flaw that should be addressed promptly.