CVE-2020-10726
Fixed in a distro release EPSS <1%CVSS 6.0
A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.
Products: dpdk data_plane_development_kit, fedoraproject fedora, opensuse leap, oracle enterprise_communications_broker
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dpdk | 19.11.2-1 |
| Debian 13 | dpdk | 19.11.2-1 |
| Debian 14 | dpdk | 19.11.2-1 |
| Red Hat Enterprise Linux 8 | dpdk | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-debuginfo | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-debugsource | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-devel | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-devel-debuginfo | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-doc | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | dpdk-tools | 0:19.11.3-1.el8 |
| Red Hat Enterprise Linux 8 | network-scripts-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-debugsource | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-devel | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13-test | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13 | 0:2.13.0-25.el8fdp.1 |
| Red Hat Enterprise Linux 8 | python3-openvswitch2.13-debuginfo | 0:2.13.0-25.el8fdp.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | dpdk | 18.11.3-4.6.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server 15-LTSS | dpdk-thunderx | 18.11.3-3.19.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 | dpdk | 18.11.3-3.19.2 |
| Ubuntu 18.04 LTS | dpdk | 17.11.9-0ubuntu18.04.2 |
| Ubuntu 20.04 LTS | dpdk | 19.11.1-0ubuntu1.1 |
| openSUSE Leap 15.1 | dpdk | 18.11.3-lp151.3.4.1 |