NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dpdk-docUpgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdk | Nov 21, 2022 | Sep 1, 2022 |
| Centos_linux | — | Upgrade openvswitch2.16-ipsecUpgrade network-scripts-openvswitch2.17Upgrade dpdk-debuginfoUpgrade python3-openvswitch2.13-debuginfoUpgrade dpdk-toolsUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.15-ipsecUpgrade openvswitch2.17-develUpgrade dpdk-develUpgrade openvswitch2.13-debuginfoUpgrade openvswitch2.17-testUpgrade network-scripts-openvswitch2.13Upgrade openvswitch2.15-debugsourceUpgrade openvswitch2.13Upgrade openvswitch2.16-debugsourceUpgrade dpdk-docUpgrade openvswitch2.17Upgrade python3-openvswitch2.17-debuginfoUpgrade openvswitch2.13-debugsourceUpgrade openvswitch2.16-develUpgrade openvswitch2.17-ipsecUpgrade python3-openvswitch2.15-debuginfoUpgrade openvswitch2.16-testUpgrade python3-openvswitch2.13Upgrade openvswitch2.16Upgrade python3-openvswitch2.16-debuginfoUpgrade openvswitch2.13-develUpgrade python3-openvswitch2.16Upgrade openvswitch2.15Upgrade python3-openvswitch2.15Upgrade openvswitch2.13-ipsecUpgrade openvswitch2.17-debuginfoUpgrade openvswitch2.15-develUpgrade network-scripts-openvswitch2.15Upgrade openvswitch2.13-testUpgrade dpdkUpgrade python3-openvswitch2.17Upgrade openvswitch2.15-testUpgrade dpdk-debugsourceUpgrade openvswitch2.16-debuginfoUpgrade network-scripts-openvswitch2.16Upgrade openvswitch2.17-debugsource | Oct 20, 2022 | Sep 1, 2022 |
| Cisco Asa | — | Upgrade to the latest version of Cisco ASA to resolve this vulnerability. | Apr 27, 2023 | Sep 1, 2022 |
| Cisco Ftd | — | Upgrade to the latest version of Cisco FTD to resolve this vulnerability. | Jan 19, 2026 | Sep 7, 2022 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE to resolve this vulnerability | Sep 8, 2022 | Sep 7, 2022 |
| Debian | — | Upgrade dpdk | Nov 4, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dpdk-toolsUpgrade dpdk | Dec 22, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdk-toolsUpgrade dpdk | Nov 15, 2022 | Sep 1, 2022 |
| Oracle_linux | — | Upgrade dpdk-docUpgrade dpdk-develUpgrade dpdk-toolsUpgrade dpdk | Nov 22, 2022 | Aug 30, 2022 |
| Redhat_linux | — | Upgrade dpdkUpgrade dpdk-debugsourceUpgrade dpdk-develNo solution existsUpgrade dpdk-debuginfoUpgrade dpdk-docUpgrade dpdk-tools | Oct 20, 2022 | Sep 1, 2022 |
| Rocky_linux | — | Upgrade dpdk-debuginfoUpgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdkUpgrade dpdk-debugsource | Mar 12, 2024 | Sep 1, 2022 |
| Suse | — | Upgrade dpdk-toolsUpgrade libdpdk-20_0Upgrade dpdk-kmp-preemptUpgrade dpdk-docUpgrade dpdk-examplesUpgrade dpdk-thunderx-examplesUpgrade dpdk-thunderx-docUpgrade dpdk-develUpgrade dpdk-thunderx-develUpgrade dpdkUpgrade dpdk-thunderxUpgrade dpdk-thunderx-kmp-preemptUpgrade dpdk-thunderx-toolsUpgrade dpdk-kmp-defaultUpgrade dpdk-thunderx-kmp-default | Oct 26, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade dpdk | Nov 19, 2024 | Sep 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub