Configuration in dpdk - #VU74490

 

Configuration in dpdk - #VU74490

Published: April 5, 2023


Vulnerability identifier: #VU74490
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-16
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The issue may allow a local user to bypass implemented security restrictions.

The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.


Affected software

dpdk
dpdk-kmp-default-debuginfo
dpdk-thunderx-kmp-default-debuginfo
dpdk-kmp-default
dpdk-thunderx-kmp-default
dpdk-doc
dpdk-thunderx-devel
dpdk-thunderx-examples
dpdk-thunderx-debuginfo
dpdk-thunderx-examples-debuginfo
dpdk-thunderx-devel-debuginfo
dpdk-thunderx
dpdk-thunderx-tools-debuginfo
dpdk-thunderx-tools
dpdk-thunderx-debugsource
dpdk-thunderx-doc
dpdk-examples-debuginfo
dpdk-examples
dpdk-devel
dpdk-tools-debuginfo
dpdk-tools
dpdk-debugsource
libdpdk-20_0-debuginfo
dpdk-devel-debuginfo
libdpdk-20_0
dpdk-debuginfo
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
Server Applications Module
openSUSE Leap

Remediation

Install updates from vendor's website.

dpdk - update to 19.11.10-150400.4.9.1
dpdk-kmp-default-debuginfo - update to 19.11.10_k5.14.21_150400.24.46-150400.4.9.1
dpdk-thunderx-kmp-default-debuginfo - update to 19.11.10_k5.14.21_150400.24.46-150400.4.9.1
dpdk-kmp-default - update to 19.11.10_k5.14.21_150400.24.46-150400.4.9.1
dpdk-thunderx-kmp-default - update to 19.11.10_k5.14.21_150400.24.46-150400.4.9.1
dpdk-doc - update to 19.11.10-150400.4.9.1
dpdk-thunderx-devel - update to 19.11.10-150400.4.9.1
dpdk-thunderx-examples - update to 19.11.10-150400.4.9.1
dpdk-thunderx-debuginfo - update to 19.11.10-150400.4.9.1
dpdk-thunderx-examples-debuginfo - update to 19.11.10-150400.4.9.1
dpdk-thunderx-devel-debuginfo - update to 19.11.10-150400.4.9.1
dpdk-thunderx - update to 19.11.10-150400.4.9.1
dpdk-thunderx-tools-debuginfo - update to 19.11.10-150400.4.9.1
dpdk-thunderx-tools - update to 19.11.10-150400.4.9.1
dpdk-thunderx-debugsource - update to 19.11.10-150400.4.9.1
dpdk-thunderx-doc - update to 19.11.10-150400.4.9.1
dpdk-examples-debuginfo - update to 19.11.10-150400.4.9.1
dpdk-examples - update to 19.11.10-150400.4.9.1
dpdk-devel - update to 19.11.10-150400.4.9.1
dpdk-tools-debuginfo - update to 19.11.10-150400.4.9.1
dpdk-tools - update to 19.11.10-150400.4.9.1
dpdk-debugsource - update to 19.11.10-150400.4.9.1
libdpdk-20_0-debuginfo - update to 19.11.10-150400.4.9.1
dpdk-devel-debuginfo - update to 19.11.10-150400.4.9.1
libdpdk-20_0 - update to 19.11.10-150400.4.9.1
dpdk-debuginfo - update to 19.11.10-150400.4.9.1

External References

Related Security Bulletins