DPDK security advisory: Multiple vulnerabilities in vhost/vhost-crypto/vDPA/GSO libraries
DPDK patched guest-triggerable memory-safety flaws in vhost, vhost-crypto, vDPA, and GSO.
The DPDK project fixed multiple memory-safety vulnerabilities in its vhost, vhost-crypto, vDPA, and GSO libraries after advance notice to downstream stakeholders. A malicious guest can exploit the flaws, including across the vhost-user boundary, to crash the host, cause denial of service, or potentially corrupt memory. The published notice does not list CVE identifiers and does not say exploitation has been observed.
54