CVE-2022-0669: Dpdk Data Plane Development Kit

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.

Affected products

• Dpdk Data Plane Development Kit: from 20.02, before 22.03 (fixed in 22.03); version 19.11 only; version 22.03 only
• Openvswitch Openvswitch: version 2.13.0 only; version 2.15.0 only
• Red Hat Openshift Container Platform: version 4.0 only

Published 2022-08-29. Last modified 2026-06-17.