NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdk-docUpgrade dpdk | Nov 21, 2022 | Sep 1, 2022 |
| Centos_linux | — | Upgrade python3-openvswitch2.16Upgrade openvswitch2.13-develUpgrade openvswitch2.15Upgrade python3-openvswitch2.16-debuginfoUpgrade python3-openvswitch2.17Upgrade dpdkUpgrade python3-openvswitch2.13Upgrade openvswitch2.17-debuginfoUpgrade openvswitch2.16-debuginfoUpgrade openvswitch2.16Upgrade dpdk-debugsourceUpgrade openvswitch2.15-develUpgrade python3-openvswitch2.15Upgrade openvswitch2.13-ipsecUpgrade network-scripts-openvswitch2.15Upgrade openvswitch2.15-testUpgrade network-scripts-openvswitch2.16Upgrade openvswitch2.13-testUpgrade openvswitch2.17-debugsourceUpgrade openvswitch2.16-ipsecUpgrade python3-openvswitch2.17-debuginfoUpgrade python3-openvswitch2.13-debuginfoUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.16-develUpgrade openvswitch2.15-debugsourceUpgrade network-scripts-openvswitch2.13Upgrade dpdk-docUpgrade openvswitch2.13Upgrade openvswitch2.16-debugsourceUpgrade openvswitch2.17Upgrade openvswitch2.17-ipsecUpgrade dpdk-debuginfoUpgrade openvswitch2.16-testUpgrade network-scripts-openvswitch2.17Upgrade openvswitch2.15-debuginfoUpgrade openvswitch2.17-develUpgrade dpdk-develUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.13-debugsourceUpgrade openvswitch2.17-testUpgrade openvswitch2.15-ipsecUpgrade dpdk-tools | Oct 20, 2022 | Sep 1, 2022 |
| Cisco Asa | — | Upgrade to the latest version of Cisco ASA to resolve this vulnerability. | Apr 27, 2023 | Sep 1, 2022 |
| Cisco Ftd | — | Upgrade to the latest version of Cisco FTD to resolve this vulnerability. | Jan 19, 2026 | Sep 7, 2022 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE to resolve this vulnerability | Sep 8, 2022 | Sep 7, 2022 |
| Debian | — | Upgrade dpdk | Nov 4, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dpdk-toolsUpgrade dpdk | Dec 22, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdk-toolsUpgrade dpdk | Nov 15, 2022 | Sep 1, 2022 |
| Oracle_linux | — | Upgrade dpdkUpgrade dpdk-docUpgrade dpdk-develUpgrade dpdk-tools | Nov 22, 2022 | Aug 30, 2022 |
| Redhat_linux | — | Upgrade dpdk-docUpgrade dpdk-debuginfoUpgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdkNo solution existsUpgrade dpdk-debugsource | Oct 20, 2022 | Sep 1, 2022 |
| Rocky_linux | — | Upgrade dpdk-debugsourceUpgrade dpdkUpgrade dpdk-debuginfoUpgrade dpdk-develUpgrade dpdk-tools | Mar 12, 2024 | Sep 1, 2022 |
| Suse | — | Upgrade dpdk-thunderxUpgrade dpdk-thunderx-develUpgrade dpdk-thunderx-toolsUpgrade dpdkUpgrade dpdk-thunderx-kmp-preemptUpgrade dpdk-kmp-defaultUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-toolsUpgrade dpdk-kmp-preemptUpgrade dpdk-thunderx-docUpgrade libdpdk-20_0Upgrade dpdk-docUpgrade dpdk-develUpgrade dpdk-examplesUpgrade dpdk-thunderx-examples | Oct 26, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade dpdk | Nov 19, 2024 | Sep 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub