SUSE update for dpdk

1) Resource management error

EUVDB-ID: #VU66871

Risk: Medium

CVSSv4.0: 5.6 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/U:Green]

CVE-ID: CVE-2022-2132

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the copy_desc_to_mbuf() function when processing Vhost header. A remote guest can send a packet with the Vhost header crossing more than two descriptors and force application to allocate all available mbufs, causing a denial of service condition for the other guest running on the hypervisor.

Mitigation

Update the affected package dpdk to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Software Development Kit: 12-SP5

SUSE Linux Enterprise Server for SAP Applications: 12-SP5

SUSE Linux Enterprise Server: 12-SP5

dpdk-kmp-default-debuginfo: before 18.11.9_k4.12.14_122.130-3.24.1

dpdk-kmp-default: before 18.11.9_k4.12.14_122.130-3.24.1

dpdk-thunderx-kmp-default-debuginfo: before 18.11.9_k4.12.14_122.130-3.24.1

dpdk-thunderx-kmp-default: before 18.11.9_k4.12.14_122.130-3.24.1

dpdk-thunderx: before 18.11.9-3.24.1

libdpdk-18_11-debuginfo: before 18.11.9-3.24.1

libdpdk-18_11: before 18.11.9-3.24.1

dpdk-tools-debuginfo: before 18.11.9-3.24.1

dpdk-tools: before 18.11.9-3.24.1

dpdk: before 18.11.9-3.24.1

dpdk-thunderx-devel-debuginfo: before 18.11.9-3.24.1

dpdk-thunderx-devel: before 18.11.9-3.24.1

dpdk-thunderx-debugsource: before 18.11.9-3.24.1

dpdk-thunderx-debuginfo: before 18.11.9-3.24.1

dpdk-devel-debuginfo: before 18.11.9-3.24.1

dpdk-devel: before 18.11.9-3.24.1

dpdk-debugsource: before 18.11.9-3.24.1

dpdk-debuginfo: before 18.11.9-3.24.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:dpdk-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-thunderx-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-thunderx-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-thunderx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libdpdk-18_11-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libdpdk-18_11:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-thunderx-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-thunderx-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-thunderx-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-thunderx-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dpdk-debuginfo:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20223381-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.