The vulnerability lies in DPDK's nfp vDPA driver, where stack and heap buffers allocated for a single queue pair can be overflowed when more virtqueues are configured. This overflow can overwrite memory, resulting in an accidental host crash or arbitrary memory corruption. The weakness corresponds to an unchecked buffer overflow (CWE‑787).

Affects Red Hat Enterprise Linux 8, 9, and 10 and associated Fast Datapath packages, as well as Red Hat OpenShift Container Platform 4 and OpenStack Platform 13 (Queens). Hosts that use the nfp vDPA driver with Fast Datapath on these distributions are vulnerable.

With a CVSS score of 6.5 the vulnerability is considered moderate risk. The EPSS score is not available, and it is not listed in CISA KEV, suggesting no widespread exploitation has been observed. Exploitation likely requires privileged or local access to the host to manipulate virtqueue configurations, but it can be triggered by a guest that is allowed to configure more virtqueues than the driver expects, leading to a denial of service or potential memory corruption if additional conditions are met. This inference is based on the driver behavior described.