7.4
High
CVE-2024-11614 An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature
Description
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fast Datapath for Red Hat Enterprise Linux 8 | Versions not published | |
| Fast Datapath for Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | Versions not published | |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | Versions not published | |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 8.8 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions not published |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 9.2 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions not published | |
| Fast Datapath for RHEL 7 | Versions not published | |
| Fast Datapath for RHEL 8 | Versions not published | |
| Fast Datapath for RHEL 9 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published |
References
- RHSA-2025:0208 access.redhat.com
- RHSA-2025:0209 access.redhat.com
- RHSA-2025:0210 access.redhat.com
- RHSA-2025:0211 access.redhat.com
- RHSA-2025:0220 access.redhat.com
- RHSA-2025:0221 access.redhat.com
- RHSA-2025:0222 access.redhat.com
- RHSA-2025:3963 access.redhat.com
- RHSA-2025:3964 access.redhat.com
- RHSA-2025:3965 access.redhat.com
- RHSA-2025:3970 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2327955 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Fast Datapath for Red Hat Enterprise Linux 8
The 7 CVEs of Fast Datapath for Red Hat Enterprise Linux 8 →
CVE-2026-5265
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original…
6.5
Medium
CVE-2026-5367
A flaw was found in OVN (Open Virtual Network)
8.6
High
CVE-2025-0650
A flaw was found in the Open Virtual Network (OVN)
8.1
High
CVE-2024-52337
Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method
5.5
Medium