Description
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | dpdk | 21.05 – < 21.11-4 | 21.11-4 |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Fast Datapath for Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — | — |
| Red Hat | Fast Datapath for RHEL 7 | — | — |
| Red Hat | Fast Datapath for RHEL 8 | — | — |
| Red Hat | Fast Datapath for RHEL 9 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dpdk | 24.11.1-1 | — |
| Debian 13 | dpdk | 24.11.1-1 | — |
| Debian 12 | dpdk | 22.11.7-1~deb12u1 | DSA-5833-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | dpdk | 23.11-1ubuntu0.1 | USN-7178-1 |
| Ubuntu 22.04 LTS | dpdk | 21.11.6-0ubuntu0.22.04.2 | USN-7178-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | dpdk +3 | 2:23.11-2.el9_5 | RHSA-2025:0210 |
| RHEL 9 | openvswitch3.1 +4 | 3.1.0-149.el9fdp | RHSA-2025:3963 |
| RHEL 9 | openvswitch3.3 +4 | 3.3.0-92.el9fdp | RHSA-2025:3964 |
| RHEL 9 | openvswitch3.4 +4 | 3.4.0-48.el9fdp | RHSA-2025:3965 |
| RHEL 8 | dpdk +3 | 23.11-2.el8_10 | RHSA-2025:0222 |
| RHEL 8 | openvswitch3.1 +5 | 3.1.0-159.el8fdp | RHSA-2025:3970 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | dpdk +3 | 2:23.11-2.el9_4 | RHSA-2025:0209 |
| RHEL 9.2 EUS | dpdk +3 | 2:22.11-4.el9_2 | RHSA-2025:0208 |
| RHEL 9.0 E4S | dpdk +3 | 2:21.11-3.el9_0 | RHSA-2025:0211 |
| RHEL 8.8 EUS | dpdk +3 | 21.11-4.el8_8 | RHSA-2025:0220 |
| RHEL 8.6 TUS | dpdk +3 | 21.11-3.el8_6 | RHSA-2025:0221 |
| RHEL 8.6 E4S | dpdk +3 | 21.11-3.el8_6 | RHSA-2025:0221 |
| RHEL 8.6 AUS | dpdk +3 | 21.11-3.el8_6 | RHSA-2025:0221 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | dpdk +3 | 2:23.11-2.el9_5 | ALSA-2025:0210 |
| AlmaLinux 8 | dpdk +3 | 23.11-2.el8_10 | ALSA-2025:0222 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | dpdk | 2:23.11-2.el9_5 | RLSA-2025:0210 |
| Rocky Linux 8 | dpdk | 23.11-2.el8_10 | RLSA-2025:0222 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | dpdk +1 | 22.11.1-150600.3.9.1 | SUSE-SU-2025:0018-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | dpdk | 22.11.10-slfo.1.1_1.1 | SUSE-SU-2026:20055-1 |
| SLE Micro 6.0 | dpdk | 22.11.10-1.1 | SUSE-SU-2026:20036-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | dpdk | 23.11.1-4.1 | openSUSE-SU-2025:14631-1 |
| openSUSE Leap 15.6 | dpdk +1 | 22.11.1-150600.3.9.1 | SUSE-SU-2025:0018-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | dpdk | 23.11.3-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | dpdk +3 | 2:23.11-2.el9_5 | ELSA-2025-0210 |
| Oracle Linux 8 | dpdk +3 | 23.11-2.el8_10 | ELSA-2025-0222 |
Advisories 24
- ALSA-2025:0210 Important: dpdk security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:0222 Important: dpdk security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:3970 Red Hat Security Advisory: openvswitch3.1 security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:3965 Red Hat Security Advisory: openvswitch3.4 security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:3963 Red Hat Security Advisory: openvswitch3.1 security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:3964 Red Hat Security Advisory: openvswitch3.3 security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0221 Red Hat Security Advisory: dpdk security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0222 Red Hat Security Advisory: dpdk security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0211 Red Hat Security Advisory: dpdk security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0220 Red Hat Security Advisory: dpdk security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0210 Red Hat Security Advisory: dpdk security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0209 Red Hat Security Advisory: dpdk security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2025:0208 Red Hat Security Advisory: dpdk security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- USN-7178-1 dpdk vulnerability Ubuntu Security Notices (USN) · Apr 22, 2026
- SUSE-SU-2026:20055-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20036-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5833-1 dpdk - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2025:0222 Important: dpdk security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2025:0018-1 Security update for dpdk SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-0040 Red Hat Enterprise Linux (dpdk): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 14, 2026
- RLSA-2025:0210 Important: dpdk security update Rocky Linux Security Advisories · Oct 9, 2025
- openSUSE-SU-2025:14631-1 dpdk-23.11.1-4.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ELSA-2025-0222 Important: dpdk security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jan 9, 2025
- ELSA-2025-0210 Important: dpdk security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jan 9, 2025
References
- RHSA-2025:0208 vendor-advisory
- RHSA-2025:0209 vendor-advisory
- RHSA-2025:0210 vendor-advisory
- RHSA-2025:0211 vendor-advisory
- RHSA-2025:0220 vendor-advisory
- RHSA-2025:0221 vendor-advisory
- RHSA-2025:0222 vendor-advisory
- RHSA-2025:3963 vendor-advisory
- RHSA-2025:3964 vendor-advisory
- RHSA-2025:3965 vendor-advisory
- RHSA-2025:3970 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2024-11614 vdb-entry
- RHBZ#2327955 issue-tracking