High ELSA-2022-8263 3 CVEs

Important: dpdk security and bug fix update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[21.11.2-1]
- Rebase to 21.11.2 (#2126159)
- Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)

[21.11.1-1]
- Rebase to 21.11.1 (#2106856)
- Includes fix for CVE-2021-3839 (#2026642)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	dpdk	2:21.11.2-1.el9_1
Oracle Linux · 9	dpdk-devel	2:21.11.2-1.el9_1
Oracle Linux · 9	dpdk-doc	2:21.11.2-1.el9_1
Oracle Linux · 9	dpdk-tools	2:21.11.2-1.el9_1

Vulnerabilities 3

Medium 6.5

CVE-2022-28199

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, wher…

NVIDIA NVIDIA FLARE dpdk dpdk Debian Ubuntu

Sep 1, 2022
Unscored —

CVE-2021-3839

A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.in…

dpdk dpdk Debian Ubuntu

Aug 23, 2022
Unscored —

CVE-2022-2132

A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of se…

dpdk dpdk Debian Ubuntu

Aug 31, 2022