Description
The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | DPDK | before 18.02.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dpdk | 17.11.2-1 | — |
| Debian 13 | dpdk | 17.11.2-1 | — |
| Debian 12 | dpdk | 17.11.2-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | dpdk | 17.11.2-1ubuntu0.1 | USN-3642-1 |
| Ubuntu 16.04 LTS | dpdk | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | openvswitch +7 | 2.9.0-19.el7fdp | RHSA-2018:1267 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Manager 4 | openvswitch +5 | 2.9.0-19.el7fdp | RHEA-2018:1547 |
| Red Hat Rhel Extras Other 7 | dpdk +3 | 17.11-11.el7 | RHSA-2018:2038 |
| Red Hat OpenStack 12 | openvswitch +6 | 2.9.0-19.el7fdp.1 | RHSA-2018:2524 |
| Red Hat OpenStack 10 | openstack-selinux | 0.8.14-5.el7ost | RHSA-2018:2102 |
| Red Hat OpenStack 10 | openvswitch +7 | 2.9.0-19.el7fdp.1 | RHSA-2018:2102 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | dpdk +1 | 16.11.6-8.4.2 | SUSE-SU-2018:3923-1, SUSE-SU-2018:1492-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | dpdk +1 | 16.11.6-8.4.2 | SUSE-SU-2018:3923-1, SUSE-SU-2018:1492-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | dpdk | 19.11.8-2.7 | openSUSE-SU-2024:10727-1 |
Advisories 9
- RHSA-2018:2524 Red Hat Security Advisory: openvswitch security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:2102 Red Hat Security Advisory: Red Hat OpenStack Platform 10 Security, Bug Fix, and Enhancement Advisory Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:2038 Red Hat Security Advisory: dpdk security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:1267 Red Hat Security Advisory: openvswitch security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHEA-2018:1547 Red Hat Enhancement Advisory: openvswitch bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-3642-1 dpdk vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2018:1492-1 Security update for dpdk-thunderxdpdk SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10727-1 dpdk-19.11.8-2.7 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:3923-1 Security update for dpdk SUSE / openSUSE Security Updates · Feb 4, 2026
References
- RHSA-2018:2524 vendor-advisory
- RHSA-2018:2102 vendor-advisory
- https://access.redhat.com/security/cve/cve-2018-1059
- USN-3642-2 vendor-advisory
- RHSA-2018:2038 vendor-advisory
- USN-3642-1 vendor-advisory
- RHSA-2018:1267 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1544298