Skip to content
OpenAdvisories
Unscored USN-5401-1 2 CVEs

dpdk vulnerabilities

Published May 4, 2022 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Wenxiang Qian discovered that DPDK incorrectly checked certain payloads. An
attacker could use this issue to cause DPDK to crash, resulting in a denial
of service, or possibly execute arbitrary code. (CVE-2021-3839)

It was discovered that DPDK incorrectly handled inflight type messages. An
attacker could possibly use this issue to cause DPDK to consume resources,
leading to a denial of service. (CVE-2022-0669)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS dpdk 19.11.12-0ubuntu0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS dpdk 21.11.1-0ubuntu0.3

Vulnerabilities 2

  • Unscored —
    CVE-2021-3839

    A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.in…

    dpdk dpdk Debian Ubuntu
  • Unscored —
    CVE-2022-0669

    A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancil…

    dpdk dpdk Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2021-3839
  • report
    https://ubuntu.com/security/CVE-2022-0669