diff --git a/CHANGELOG.md b/CHANGELOG.md
index 222b20c77..dbf14be69 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@
 `spdk_thread_send_msg` now returns int indicating if the message was successfully
 sent.
 
+### dpdk
+
+DPDK submodule updated to include fix for vhost CVE-2019-14818.
+
 ## v19.10:
 
 ### rpc
diff --git a/dpdk b/dpdk
index b5c962495..0698cc38e 160000
--- a/dpdk
+++ b/dpdk
@@ -1 +1 @@
-Subproject commit b5c96249571ff384e3c0b1a83766934e7725b695
+Subproject commit 0698cc38e0cb86bc01d82b6f1aef85fd983b213d