A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dpdk-develUpgrade dpdk-docUpgrade dpdk-toolsUpgrade dpdk | May 4, 2022 | May 20, 2020 |
| Centos_linux | — | Upgrade openvswitch2.13-testUpgrade dpdk-devel-debuginfoUpgrade openvswitch2.13Upgrade openvswitch2.13-debuginfoUpgrade network-scripts-openvswitch2.13Upgrade python3-openvswitch2.13-debuginfoUpgrade dpdk-debuginfoUpgrade openvswitch2.13-develUpgrade dpdk-develUpgrade dpdkUpgrade dpdk-docUpgrade python3-openvswitch2.13Upgrade dpdk-toolsUpgrade dpdk-debugsourceUpgrade openvswitch2.13-debugsource | May 27, 2020 | May 20, 2020 |
| Debian | — | Upgrade dpdk | Jul 30, 2024 | May 20, 2020 |
| Oracle_linux | — | Upgrade dpdk-toolsUpgrade dpdk-docUpgrade dpdkUpgrade dpdk-devel | Nov 14, 2020 | May 18, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | May 20, 2020 |
| Redhat_linux | — | Upgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdk-debuginfoUpgrade dpdk-devel-debuginfoUpgrade dpdk-docUpgrade dpdk-debugsourceUpgrade dpdk | May 27, 2020 | May 20, 2020 |
| Suse | — | Upgrade dpdkUpgrade libdpdk-18_11Upgrade dpdk-thunderxUpgrade dpdk-examplesUpgrade dpdk-docUpgrade dpdk-toolsUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-develUpgrade libdpdk-20_0Upgrade dpdk-thunderx-develUpgrade dpdk-kmp-default | May 20, 2020 | May 18, 2020 |
| Ubuntu | — | Upgrade dpdk | May 19, 2020 | May 18, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub