An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dpdk | Jul 30, 2024 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade dpdkUpgrade dpdk-devel | Feb 3, 2021 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdk | Nov 3, 2020 | Sep 30, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdkUpgrade dpdk-tools | Nov 3, 2020 | Sep 30, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 30, 2020 |
| Suse | — | Upgrade dpdk-toolsUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk-docUpgrade libdpdk-20_0Upgrade dpdk-thunderx-develUpgrade dpdkUpgrade dpdk-kmp-defaultUpgrade dpdk-kmp-preemptUpgrade dpdk-examplesUpgrade dpdk-develUpgrade dpdk-thunderxUpgrade libdpdk-18_11 | Sep 29, 2020 | Sep 28, 2020 |
| Ubuntu | — | Upgrade dpdk | Sep 29, 2020 | Sep 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub