USN-7178-1: DPDK vulnerability
It was discovered that DPDK incorrectly handled the Vhost library checksum offload feature. An malicious guest could possibly use this issue to cause the hypervisor's vSwitch to crash, resulting in a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7178-1?
The severity of USN-7178-1 is classified as a denial of service vulnerability that allows a malicious guest to crash the hypervisor's vSwitch.
How do I fix USN-7178-1?
To fix USN-7178-1, upgrade to the recommended DPDK versions 23.11.2-0ubuntu1.1 for Ubuntu 24.10, 23.11-1ubuntu0.1 for Ubuntu 24.04, or 21.11.6-0ubuntu0.22.04.2 for Ubuntu 22.04.
What software is affected by USN-7178-1?
USN-7178-1 affects the DPDK package in specific versions of Ubuntu, including 24.10, 24.04, and 22.04.
Who discovered the vulnerability USN-7178-1?
The vulnerability USN-7178-1 was discovered by security researchers examining the DPDK Vhost library checksum offload feature.
Can USN-7178-1 be exploited remotely?
Yes, USN-7178-1 can potentially be exploited by a malicious guest on the same system, leading to a denial of service.