RHSA-2022:8263: Important: dpdk security and bug fix update
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.Security Fix(es): dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132) DPDK: out-of-bounds read/write in vhostusersetinflightfd() may lead to crash (CVE-2021-3839) dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:8263?
The severity of RHSA-2022:8263 is classified as a Denial of Service vulnerability.
How do I fix RHSA-2022:8263?
To fix RHSA-2022:8263, update the DPDK package to version 21.11.2-1.el9_1 or later.
Which packages are affected by RHSA-2022:8263?
RHSA-2022:8263 affects several DPDK packages including dpdk, dpdk-devel, dpdk-tools, and their associated debuginfo and debug source packages.
What type of vulnerability is addressed in RHSA-2022:8263?
RHSA-2022:8263 addresses a Denial of Service (DoS) vulnerability when a Vhost header crosses more than two descriptors.
Is RHSA-2022:8263 applicable to both x86_64 and ppc64le architectures?
Yes, RHSA-2022:8263 is applicable to both x86_64 and ppc64le architectures.