Description
NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | Mellanox DPDK 22.11 | All versions prior to 22.11_2504.1.0, All versions prior to 22.11_2410 LTS, All versions prior to 22.11_2310 LTS | — |
| NVIDIA | Mellanox DPDK 20.11 | All versions prior to 20.11_7.8.0 LTS | — |
| NVIDIA | Upstream DPDK | All versions prior to 25.07, All versions prior to 24.11.3 LTS, All versions prior to 23.11.5 LTS, All versions prior to 22.11.10 LTS | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dpdk | 24.11.3-1 | — |
| Debian 13 | dpdk | 24.11.3-1~deb13u1 | — |
| Debian 12 | dpdk | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | dpdk | 23.11.4-0ubuntu0.24.04.2 | USN-7816-1 |
| Ubuntu 22.04 LTS | dpdk | 21.11.9-0ubuntu0.22.04.2 | USN-7816-1 |
| Ubuntu 20.04 LTS | dpdk | No fix yet | — |
| Ubuntu 18.04 LTS | dpdk | No fix yet | — |
| Ubuntu 16.04 LTS | dpdk | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | dpdk +1 | 24.11.4-150700.3.6.1 | SUSE-SU-2026:0238-1 |
| SLES 15 SP6 | dpdk +1 | 22.11.10-150600.3.15.1 | SUSE-SU-2025:4254-1 |
| SLES 15 SP5 | dpdk22 +1 | 22.11.10-150500.5.10.1 | SUSE-SU-2025:4534-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | dpdk | 24.11.4-160000.1.1 | SUSE-SU-2026:20218-1 |
| SLES for SAP 15 SP5 | dpdk22 | 22.11.10-150500.5.10.1 | SUSE-SU-2025:4534-1 |
| SLES 16.0 | dpdk | 24.11.4-160000.1.1 | SUSE-SU-2026:20218-1 |
| SLE Micro 6.2 | dpdk | 24.11.4-160000.1.1 | SUSE-SU-2026:20209-1 |
| SLE Micro 6.1 | dpdk | 22.11.10-slfo.1.1_1.1 | SUSE-SU-2026:20055-1 |
| SLE Micro 6.0 | dpdk | 22.11.10-1.1 | SUSE-SU-2026:20036-1 |
| SLE Micro 5.5 | dpdk22 +1 | 22.11.10-150500.5.10.1 | SUSE-SU-2025:4534-1 |
| SLE HPC 15 SP5 | dpdk22 +1 | 22.11.10-150500.5.10.1 | SUSE-SU-2025:4534-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | dpdk | 24.11.4-160000.1.1 | openSUSE-SU-2026:20148-1 |
| openSUSE Leap 15.6 | dpdk +1 | 22.11.10-150600.3.15.1 | SUSE-SU-2025:4254-1 |
| openSUSE Leap 15.6 | dpdk22 +1 | 22.11.10-150500.5.10.1 | SUSE-SU-2025:4534-1 |
Advisories 9
- USN-7816-1 dpdk vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- openSUSE-SU-2026:20148-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20218-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20209-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20055-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20036-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0238-1 Security update for dpdk SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:4254-1 Security update for dpdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:4534-1 Security update for dpdk22 SUSE / openSUSE Security Updates · Feb 4, 2026