Skip to content
OpenAdvisories
High ALSA-2023:0171 1 CVE

Important: dpdk security update

Published Jan 16, 2023 · Updated Oct 29, 2026

Summary

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.

Security Fix(es):

* dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 dpdk 21.11-2.el8_7
AlmaLinux · 8 dpdk-devel 21.11-2.el8_7
AlmaLinux · 8 dpdk-doc 21.11-2.el8_7
AlmaLinux · 8 dpdk-tools 21.11-2.el8_7

Vulnerabilities 1

  • Unscored —

    A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of se…

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-2132
  • report
    https://bugzilla.redhat.com/2099475
  • advisory
    https://errata.almalinux.org/8/ALSA-2023-0171.html