CVE-2026-5164

[CVE catalog]

A flaw was found in virtio-win. The `RhelDoUnMap()` function does not properly validate the number of descriptors provided by a user during an unmap request. A local user could exploit this input validation vulnerability by supplying an excessive number of descriptors, leading to a buffer overrun. This can cause a system crash, resulting in a Denial of Service (DoS). virtio-win: virtio-win: Denial of Service via unvalidated descriptor count in unmap request This Moderate severity flaw in virtio-win affects Windows guests running on Red Hat Enterprise Linux. A local user within the guest operating system can trigger a Denial of Service by providing an excessive number of descriptors during an unmap request, leading to a buffer overrun and crash. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Severity

Medium · CVSS 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Published

Mar 30, 2026, 12:34:00 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.11% · Oct 27, 2026

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "virtio-win",
      "ecosystem": "cpe",
      "fixed_version": ""
    },
    {
      "name": "enterprise_linux",
      "ecosystem": "cpe",
      "fixed_version": ""
    }
  ]
}