SUSE update for dpdk

1) Resource management error

EUVDB-ID: #VU66871

Risk: Medium

CVSSv4.0: 5.6 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/U:Green]

CVE-ID: CVE-2022-2132

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the copy_desc_to_mbuf() function when processing Vhost header. A remote guest can send a packet with the Vhost header crossing more than two descriptors and force application to allocate all available mbufs, causing a denial of service condition for the other guest running on the hypervisor.

Mitigation

Update the affected package dpdk to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP Applications 15: SP2

SUSE Linux Enterprise Server 15 SP2 LTSS: 15-SP2

SUSE Linux Enterprise Server 15: SP2

SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS: 15-SP2

SUSE Linux Enterprise High Performance Computing 15: SP2

dpdk-thunderx-devel-debuginfo: before 19.11.4-150200.3.25.1

dpdk-thunderx-debuginfo: before 19.11.4-150200.3.25.1

dpdk-thunderx-debugsource: before 19.11.4-150200.3.25.1

dpdk-thunderx-kmp-default-debuginfo: before 19.11.4_k5.3.18_150200.24.175-150200.3.25.1

dpdk-thunderx: before 19.11.4-150200.3.25.1

dpdk-thunderx-devel: before 19.11.4-150200.3.25.1

dpdk-thunderx-kmp-default: before 19.11.4_k5.3.18_150200.24.175-150200.3.25.1

libdpdk-20_0-debuginfo: before 19.11.4-150200.3.25.1

dpdk-kmp-default-debuginfo: before 19.11.4_k5.3.18_150200.24.175-150200.3.25.1

dpdk-debugsource: before 19.11.4-150200.3.25.1

dpdk-tools: before 19.11.4-150200.3.25.1

dpdk-devel: before 19.11.4-150200.3.25.1

dpdk-tools-debuginfo: before 19.11.4-150200.3.25.1

dpdk-devel-debuginfo: before 19.11.4-150200.3.25.1

dpdk-kmp-default: before 19.11.4_k5.3.18_150200.24.175-150200.3.25.1

dpdk-debuginfo: before 19.11.4-150200.3.25.1

dpdk: before 19.11.4-150200.3.25.1

libdpdk-20_0: before 19.11.4-150200.3.25.1

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP2:*:*:*:*:*:*:*
• cpe:2.3:o:suse:dpdk-thunderx-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-thunderx-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-thunderx-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-thunderx-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-thunderx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-thunderx-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-thunderx-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libdpdk-20_0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dpdk:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:libdpdk-20_0:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2024/suse-su-20240530-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.