Resource management error in DPDK - CVE-2022-2132

Vulnerability identifier: #VU66871

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]

CVE-ID: CVE-2022-2132

CWE-ID: CWE-399

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the copy_desc_to_mbuf() function when processing Vhost header. A remote guest can send a packet with the Vhost header crossing more than two descriptors and force application to allocate all available mbufs, causing a denial of service condition for the other guest running on the hypervisor.

DPDK
Oracle Linux
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Power, little endian
Anolis OS
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Server 15 SP4 LTSS
Legacy Module
openSUSE Leap
Ubuntu
openEuler
openvswitch2.11 (Red Hat package)
openvswitch2.13 (Red Hat package)
openvswitch2.15 (Red Hat package)
openvswitch2.16 (Red Hat package)
openvswitch2.17 (Red Hat package)
redhat-virtualization-host-productimg (Red Hat package)
redhat-release-virtualization-host (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
dpdk (Ubuntu package)
dpdk (Red Hat package)
dpdk-doc
dpdk-tools
dpdk-devel
dpdk
dpdk-kmp-default-debuginfo
dpdk-kmp-default
dpdk-thunderx-kmp-default-debuginfo
dpdk-thunderx-kmp-default
dpdk-debugsource
dpdk-debuginfo
dpdk-devel-debuginfo
dpdk-thunderx-debuginfo
dpdk-thunderx-debugsource
dpdk-thunderx-devel
dpdk-thunderx-devel-debuginfo
dpdk-tools-debuginfo
libdpdk-18_11
libdpdk-18_11-debuginfo
dpdk-thunderx
dpdk-thunderx-kmp-preempt
dpdk-thunderx-kmp-preempt-debuginfo
dpdk-kmp-preempt-debuginfo
dpdk-kmp-preempt
libdpdk-20_0-debuginfo
libdpdk-20_0
dpdk-thunderx-doc
dpdk-examples
dpdk-examples-debuginfo
dpdk-thunderx-examples
dpdk-thunderx-examples-debuginfo
dpdk-thunderx-tools
dpdk-thunderx-tools-debuginfo
dpdk (Debian package)
Red Hat Virtualization Host
Red Hat Virtualization
Red Hat Enterprise Linux Fast Datapath

Install updates from vendor's website.

DPDK - addressed in versions 19.11.13, 20.11.6, 21.11.2
openvswitch2.11 (Red Hat package) - update to 2.11.3-96.2.el7fdp
openvswitch2.13 (Red Hat package) - update to 2.13.0-193.2.el8fdp
openvswitch2.15 (Red Hat package) - update to 2.15.0-113.2.el8fdp
openvswitch2.16 (Red Hat package) - update to 2.16.0-89.2.el8fdp
openvswitch2.17 (Red Hat package) - addressed in versions 2.17.0-32.3.el9fdp, 2.17.0-37.3.el8fdp
redhat-virtualization-host-productimg (Red Hat package) - update to 4.5.2-1.el8
redhat-release-virtualization-host (Red Hat package) - update to 4.5.2-1.el8ev
dpdk (Ubuntu package) - addressed in versions 17.11.10-0ubuntu0.2, 19.11.13-0ubuntu0.20.04.1, 21.11.2-0ubuntu0.22.04.1
dpdk (Red Hat package) - addressed in versions 18.11.2-5.el8_1, 18.11.8-2.el7_9, 19.11-6.el8_2, 20.11-4.el8_4, 21.11-2.el8_6, 21.11-2.el8_7, 21.11-2.el9_0, 21.11.2-1.el9_1
dpdk-doc - addressed in versions 18.11.8-2, 21.11-2
dpdk-tools - addressed in versions 18.11.8-2, 21.11-2
dpdk-devel - addressed in versions 18.11.8-2, 21.11-2
dpdk - addressed in versions 18.11.8-2, 21.11-2
dpdk-kmp-default-debuginfo - addressed in versions 18.11.9_k4.12.14_122.130-3.24.1, 18.11.9_k4.12.14_122.189-3.29.1, 18.11.9_k4.12.14_150000.150.98-150000.3.32.2, 18.11.9_k4.12.14_150100.197.120-150100.4.19.1, 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150200.24.175-150200.3.25.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1, 19.11.10_k5.14.21_150400.24.103-150400.4.12.1, 19.11.10_k5.14.21_150500.55.44-150500.5.3.1
dpdk-kmp-default - addressed in versions 18.11.9_k4.12.14_122.130-3.24.1, 18.11.9_k4.12.14_122.189-3.29.1, 18.11.9_k4.12.14_150000.150.98-150000.3.32.2, 18.11.9_k4.12.14_150100.197.120-150100.4.19.1, 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150200.24.175-150200.3.25.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1, 19.11.10_k5.14.21_150400.24.103-150400.4.12.1, 19.11.10_k5.14.21_150500.55.44-150500.5.3.1
dpdk-thunderx-kmp-default-debuginfo - addressed in versions 18.11.9_k4.12.14_122.130-3.24.1, 18.11.9_k4.12.14_122.189-3.29.1, 18.11.9_k4.12.14_150000.150.98-150000.3.32.2, 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150200.24.175-150200.3.25.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1, 19.11.10_k5.14.21_150400.24.103-150400.4.12.1, 19.11.10_k5.14.21_150500.55.44-150500.5.3.1
dpdk-thunderx-kmp-default - addressed in versions 18.11.9_k4.12.14_122.130-3.24.1, 18.11.9_k4.12.14_122.189-3.29.1, 18.11.9_k4.12.14_150000.150.98-150000.3.32.2, 19.11.4_k5.3.18_150200.24.126-150200.3.20.1, 19.11.4_k5.3.18_150200.24.175-150200.3.25.1, 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1, 19.11.10_k5.14.21_150400.24.18-150400.4.7.1, 19.11.10_k5.14.21_150400.24.103-150400.4.12.1, 19.11.10_k5.14.21_150500.55.44-150500.5.3.1
dpdk-debugsource - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-tools - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-debuginfo - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-devel - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-devel-debuginfo - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-debuginfo - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-debugsource - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-devel - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-devel-debuginfo - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-tools-debuginfo - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
libdpdk-18_11 - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1
libdpdk-18_11-debuginfo - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 18.11.9-150100.4.19.1
dpdk-thunderx - addressed in versions 18.11.9-3.24.1, 18.11.9-3.29.1, 18.11.9-150000.3.32.2, 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-kmp-preempt - addressed in versions 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1
dpdk-thunderx-kmp-preempt-debuginfo - addressed in versions 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1
dpdk-kmp-preempt-debuginfo - addressed in versions 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1
dpdk-kmp-preempt - addressed in versions 19.11.4_k5.3.18_150300.59.93-150300.16.1, 19.11.4_k5.3.18_150300.59.147-150300.21.1
libdpdk-20_0-debuginfo - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
libdpdk-20_0 - addressed in versions 19.11.4-150200.3.20.1, 19.11.4-150200.3.25.1, 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-doc - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-doc - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-examples - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-examples-debuginfo - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-examples - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-examples-debuginfo - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-tools - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk-thunderx-tools-debuginfo - addressed in versions 19.11.4-150300.16.1, 19.11.4-150300.21.1, 19.11.10-150400.4.7.1, 19.11.10-150400.4.12.1, 19.11.10-150500.5.3.1
dpdk - update to 19.11-20
dpdk-devel - update to 19.11-20
dpdk-tools - update to 19.11-20
dpdk-debuginfo - update to 19.11-20
dpdk-debugsource - update to 19.11-20
dpdk-doc - update to 19.11-20
dpdk (Debian package) - update to 20.11.6-1~deb11u1

• https://bugs.dpdk.org/show_bug.cgi?id=1031
• https://www.openwall.com/lists/oss-security/2022/08/29/4
• https://git.dpdk.org/dpdk/commit/?id=71bd0cc536ad6d84188d947d6f24c17400d8f623
• https://git.dpdk.org/dpdk/commit/?id=dc1516e260a0df272b218392faf6db3cbf45e717

• Multiple vulnerabilities in DPDK
• Debian update for dpdk
• Red Hat Enterprise Linux Fast Datapath 9 update for openvswitch2.17
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.15
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.13
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.17
• Red Hat Enterprise Linux Fast Datapath 8 update for openvswitch2.16
• Ubuntu update for dpdk
• Multiple vulnerabilities in Red Hat Virtualization Host 4 for RHEL 8
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• Fast Datapath for Red Hat Enterprise Linux 7 update for openvswitch2.11
• Red Hat OpenStack Platform update for openvswitch2.11
• Red Hat Enterprise Linux 9 update for dpdk
• Red Hat Enterprise Linux 8 update for dpdk
• Red Hat Enterprise Linux 7 Extras update for dpdk
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions update for dpdk
• Red Hat Enterprise Linux 8.6 Extended Update Support update for dpdk
• Red Hat Enterprise Linux 8.4 Extended Update Support update for dpdk
• Red Hat Enterprise Linux 8 update for dpdk
• Red Hat Enterprise Linux 9.0 Extended Update Support update for dpdk
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Oracle Linux
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• SUSE update for dpdk
• openEuler update for dpdk
• Anolis OS update for dpdk
• Anolis OS update for dpdk