NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dpdk-toolsUpgrade dpdk-develUpgrade dpdk-docUpgrade dpdk | Nov 21, 2022 | Sep 1, 2022 |
| Centos_linux | — | Upgrade openvswitch2.16-debugsourceUpgrade openvswitch2.15-debugsourceUpgrade dpdk-docUpgrade network-scripts-openvswitch2.13Upgrade openvswitch2.13-debugsourceUpgrade openvswitch2.15-debuginfoUpgrade openvswitch2.16-ipsecUpgrade openvswitch2.15-ipsecUpgrade openvswitch2.17-testUpgrade python3-openvswitch2.17-debuginfoUpgrade openvswitch2.13Upgrade openvswitch2.13-debuginfoUpgrade openvswitch2.17-develUpgrade dpdk-develUpgrade python3-openvswitch2.13-debuginfoUpgrade openvswitch2.16-testUpgrade network-scripts-openvswitch2.17Upgrade dpdk-toolsUpgrade openvswitch2.17Upgrade openvswitch2.16-develUpgrade python3-openvswitch2.15-debuginfoUpgrade dpdk-debuginfoUpgrade openvswitch2.17-ipsecUpgrade openvswitch2.16-debuginfoUpgrade python3-openvswitch2.16-debuginfoUpgrade python3-openvswitch2.15Upgrade openvswitch2.15-develUpgrade openvswitch2.13-ipsecUpgrade openvswitch2.17-debuginfoUpgrade openvswitch2.16Upgrade network-scripts-openvswitch2.16Upgrade openvswitch2.17-debugsourceUpgrade openvswitch2.13-testUpgrade python3-openvswitch2.16Upgrade openvswitch2.15Upgrade dpdkUpgrade python3-openvswitch2.17Upgrade openvswitch2.15-testUpgrade network-scripts-openvswitch2.15Upgrade dpdk-debugsourceUpgrade openvswitch2.13-develUpgrade python3-openvswitch2.13 | Oct 20, 2022 | Sep 1, 2022 |
| Cisco Asa | — | Upgrade to the latest version of Cisco ASA to resolve this vulnerability. | Apr 27, 2023 | Sep 1, 2022 |
| Cisco Ftd | — | Upgrade to the latest version of Cisco FTD to resolve this vulnerability. | Jan 19, 2026 | Sep 7, 2022 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE to resolve this vulnerability | Sep 8, 2022 | Sep 7, 2022 |
| Debian | — | Upgrade dpdk | Nov 4, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dpdkUpgrade dpdk-tools | Dec 22, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dpdkUpgrade dpdk-tools | Nov 15, 2022 | Sep 1, 2022 |
| Oracle_linux | — | Upgrade dpdk-docUpgrade dpdk-develUpgrade dpdk-toolsUpgrade dpdk | Nov 22, 2022 | Aug 30, 2022 |
| Redhat_linux | — | Upgrade dpdk-toolsUpgrade dpdk-docUpgrade dpdk-debuginfoNo solution existsUpgrade dpdk-debugsourceUpgrade dpdk-develUpgrade dpdk | Oct 20, 2022 | Sep 1, 2022 |
| Rocky_linux | — | Upgrade dpdk-toolsUpgrade dpdk-debuginfoUpgrade dpdk-develUpgrade dpdk-debugsourceUpgrade dpdk | Mar 12, 2024 | Sep 1, 2022 |
| Suse | — | Upgrade libdpdk-20_0Upgrade dpdk-toolsUpgrade dpdk-kmp-preemptUpgrade dpdk-examplesUpgrade dpdk-docUpgrade dpdk-thunderx-examplesUpgrade dpdk-develUpgrade dpdk-thunderx-docUpgrade dpdk-thunderxUpgrade dpdk-thunderx-develUpgrade dpdk-kmp-defaultUpgrade dpdk-thunderx-toolsUpgrade dpdk-thunderx-kmp-preemptUpgrade dpdk-thunderx-kmp-defaultUpgrade dpdk | Oct 26, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade dpdk | Nov 19, 2024 | Sep 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub