Skip to content
6.0 Medium

CVE-2020-10726 A vulnerability was found in DPDK versions 19.11 and above

Description

A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.

Affected products and versions

Product Affected versions Fixed in
dpdk 20.02.1 No fix stated
dpdk 19.11.2 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 5 CVEs of dpdk →
Track this CVE