CVE-2021-3839
Fixed in a distro release EPSS 2%
A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.
Products: dpdk data_plane_development_kit, fedoraproject fedora, redhat enterprise_linux, redhat enterprise_linux_fast_datapath
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | dpdk | 2:21.11.2-1.el9_1 |
| AlmaLinux 9 | dpdk-devel | 2:21.11.2-1.el9_1 |
| AlmaLinux 9 | dpdk-doc | 2:21.11.2-1.el9_1 |
| AlmaLinux 9 | dpdk-tools | 2:21.11.2-1.el9_1 |
| Arch Linux | dpdk | 22.03-1 |
| Debian 11 | dpdk | 20.11.5-1~deb11u1 |
| Debian 12 | dpdk | 20.11.5-1 |
| Debian 13 | dpdk | 20.11.5-1 |
| Debian 14 | dpdk | 20.11.5-1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-180.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15 | 0:2.15.0-99.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.16 | 0:2.16.0-74.el8fdp |
| Red Hat Enterprise Linux 9 | dpdk | 2:21.11.2-1.el9_1 |
| Red Hat Enterprise Linux 9 | dpdk-debuginfo | 2:21.11.2-1.el9_1 |
| Red Hat Enterprise Linux 9 | dpdk-debugsource | 2:21.11.2-1.el9_1 |
| Red Hat Enterprise Linux 9 | dpdk-devel | 2:21.11.2-1.el9_1 |
| Red Hat Enterprise Linux 9 | dpdk-doc | 2:21.11.2-1.el9_1 |
| Red Hat Enterprise Linux 9 | dpdk-tools | 2:21.11.2-1.el9_1 |
| Rocky Linux 9 | dpdk | 2:21.11.2-1.el9_1 |
| SUSE Enterprise Storage 7 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Enterprise Storage 7 | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | dpdk | 19.11.4-150300.11.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | dpdk-thunderx | 19.11.4-150300.11.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Manager Proxy 4.1 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Manager Retail Branch Server 4.1 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Manager Server 4.1 | dpdk | 19.11.4-150200.3.17.1 |
| Ubuntu 20.04 LTS | dpdk | 19.11.12-0ubuntu0.20.04.1 |
| Ubuntu 22.04 LTS | dpdk | 21.11.1-0ubuntu0.3 |
| openSUSE Leap 15.3 | dpdk | 19.11.4-150300.11.1 |
| openSUSE Leap 15.3 | dpdk-thunderx | 19.11.4-150300.11.1 |
| openSUSE Leap 15.4 | dpdk | 19.11.4-150300.11.1 |
| openSUSE Leap 15.4 | dpdk-thunderx | 19.11.4-150300.11.1 |