Description (CNA)
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 21.05 before 21.11-4 |
| Red Hat / Fast Datapath for Red Hat Enterprise Linux 8 | unaffected 0:3.1.0-159.el8fdp before * |
| Red Hat / Fast Datapath for Red Hat Enterprise Linux 9 | unaffected 0:3.1.0-149.el9fdp before * |
| Red Hat / Fast Datapath for Red Hat Enterprise Linux 9 | unaffected 0:3.3.0-92.el9fdp before * |
| Red Hat / Fast Datapath for Red Hat Enterprise Linux 9 | unaffected 0:3.4.0-48.el9fdp before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:23.11-2.el8_10 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:21.11-3.el8_6 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service | unaffected 0:21.11-3.el8_6 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | unaffected 0:21.11-3.el8_6 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 0:21.11-4.el8_8 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 2:23.11-2.el9_5 before * |
| Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | unaffected 2:21.11-3.el9_0 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 2:22.11-4.el9_2 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support | unaffected 2:23.11-2.el9_4 before * |
| Red Hat / Fast Datapath for RHEL 7 | unaffected |
| Red Hat / Fast Datapath for RHEL 7 | unaffected |
| Red Hat / Fast Datapath for RHEL 7 | unaffected |
| Red Hat / Fast Datapath for RHEL 7 | unaffected |
| Red Hat / Fast Datapath for RHEL 7 | unaffected |
| Red Hat / Fast Datapath for RHEL 8 | unaffected |
| Red Hat / Fast Datapath for RHEL 8 | unaffected |
| Red Hat / Fast Datapath for RHEL 8 | unaffected |
| Red Hat / Fast Datapath for RHEL 8 | unaffected |
| Red Hat / Fast Datapath for RHEL 8 | unaffected |
| Red Hat / Fast Datapath for RHEL 8 | unaffected |
| Red Hat / Fast Datapath for RHEL 9 | unaffected |
| Red Hat / Fast Datapath for RHEL 9 | unaffected |
| Red Hat / Fast Datapath for RHEL 9 | unaffected |
| Red Hat / Red Hat OpenShift Container Platform 4 | unaffected |
| Red Hat / Red Hat OpenShift Container Platform 4 | unaffected |
| Red Hat / Red Hat OpenShift Container Platform 4 | unaffected |
| Red Hat / Red Hat OpenShift Container Platform 4 | unaffected |
CWE
CWE-125
References
- https://access.redhat.com/errata/RHSA-2025:0208
- https://access.redhat.com/errata/RHSA-2025:0209
- https://access.redhat.com/errata/RHSA-2025:0210
- https://access.redhat.com/errata/RHSA-2025:0211
- https://access.redhat.com/errata/RHSA-2025:0220
- https://access.redhat.com/errata/RHSA-2025:0221
- https://access.redhat.com/errata/RHSA-2025:0222
- https://access.redhat.com/errata/RHSA-2025:3963
- https://access.redhat.com/errata/RHSA-2025:3964
- https://access.redhat.com/errata/RHSA-2025:3965
- https://access.redhat.com/errata/RHSA-2025:3970
- https://access.redhat.com/security/cve/CVE-2024-11614
- https://bugzilla.redhat.com/show_bug.cgi?id=2327955
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.