CVE-2022-0669
Fixed in a distro release EPSS <1%
A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
Products: dpdk data_plane_development_kit, openvswitch, redhat openshift_container_platform
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | dpdk | 22.03-1 |
| Debian 11 | dpdk | 20.11.5-1~deb11u1 |
| Debian 12 | dpdk | 20.11.5-1 |
| Debian 13 | dpdk | 20.11.5-1 |
| Debian 14 | dpdk | 20.11.5-1 |
| Red Hat Enterprise Linux 8 | openvswitch2.13 | 0:2.13.0-180.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.15 | 0:2.15.0-99.el8fdp |
| Red Hat Enterprise Linux 8 | openvswitch2.16 | 0:2.16.0-74.el8fdp |
| SUSE Enterprise Storage 7 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Enterprise Storage 7 | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | dpdk | 19.11.4-150300.11.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | dpdk-thunderx | 19.11.4-150300.11.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | dpdk-thunderx | 19.11.4-150200.3.17.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Manager Proxy 4.1 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Manager Retail Branch Server 4.1 | dpdk | 19.11.4-150200.3.17.1 |
| SUSE Manager Server 4.1 | dpdk | 19.11.4-150200.3.17.1 |
| Ubuntu 20.04 LTS | dpdk | 19.11.12-0ubuntu0.20.04.1 |
| Ubuntu 22.04 LTS | dpdk | 21.11.1-0ubuntu0.3 |
| openSUSE Leap 15.3 | dpdk | 19.11.4-150300.11.1 |
| openSUSE Leap 15.3 | dpdk-thunderx | 19.11.4-150300.11.1 |
| openSUSE Leap 15.4 | dpdk | 19.11.4-150300.11.1 |
| openSUSE Leap 15.4 | dpdk-thunderx | 19.11.4-150300.11.1 |