Configuration in dpdk - #VU73897

 

Configuration in dpdk - #VU73897

Published: March 21, 2023


Vulnerability identifier: #VU73897
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-16
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The issue may allow a local user to bypass implemented security restrictions.

The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.


Affected software

dpdk
dpdk-kmp-default
dpdk-thunderx-kmp-default-debuginfo
dpdk-thunderx-kmp-default
dpdk-kmp-default-debuginfo
dpdk-debugsource
dpdk-thunderx
dpdk-thunderx-debugsource
dpdk-thunderx-devel
dpdk-thunderx-debuginfo
dpdk-thunderx-devel-debuginfo
dpdk-debuginfo
dpdk-devel
libdpdk-20_0-debuginfo
libdpdk-20_0
dpdk-tools
dpdk-devel-debuginfo
dpdk-tools-debuginfo
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP3 LTSS

Remediation

Install updates from vendor's website.

dpdk - update to 19.11.4-150300.18.1
dpdk-kmp-default - update to 19.11.4_k5.3.18_150300.59.112-150300.18.1
dpdk-thunderx-kmp-default-debuginfo - update to 19.11.4_k5.3.18_150300.59.112-150300.18.1
dpdk-thunderx-kmp-default - update to 19.11.4_k5.3.18_150300.59.112-150300.18.1
dpdk-kmp-default-debuginfo - update to 19.11.4_k5.3.18_150300.59.112-150300.18.1
dpdk-debugsource - update to 19.11.4-150300.18.1
dpdk-thunderx - update to 19.11.4-150300.18.1
dpdk-thunderx-debugsource - update to 19.11.4-150300.18.1
dpdk-thunderx-devel - update to 19.11.4-150300.18.1
dpdk-thunderx-debuginfo - update to 19.11.4-150300.18.1
dpdk-thunderx-devel-debuginfo - update to 19.11.4-150300.18.1
dpdk-debuginfo - update to 19.11.4-150300.18.1
dpdk-devel - update to 19.11.4-150300.18.1
libdpdk-20_0-debuginfo - update to 19.11.4-150300.18.1
libdpdk-20_0 - update to 19.11.4-150300.18.1
dpdk-tools - update to 19.11.4-150300.18.1
dpdk-devel-debuginfo - update to 19.11.4-150300.18.1
dpdk-tools-debuginfo - update to 19.11.4-150300.18.1

External References

Related Security Bulletins