CVE-2022-2132: Debian Linux

High severity, CVSS 8.6. EPSS: 2.2% chance of exploitation in the next 30 days.

A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.

Affected products

• Debian Debian Linux: version 10.0 only
• Dpdk Data Plane Development Kit: before 19.11 (fixed in 19.11); from 20.0, before 20.11 (fixed in 20.11); from 21.0, before 21.11 (fixed in 21.11)
• Fedoraproject Fedora: version 36 only
• Red Hat Enterprise Linux: version 7.0 only; version 8.0 only; version 9.0 only
• Red Hat Enterprise Linux Fast Datapath: version 7.0 only; version 8.0 only; version 9.0 only
• Red Hat Openshift Container Platform: version 4.0 only
• Red Hat Openstack Platform: version 13.0 only
• Red Hat Virtualization: version 4.0 only

Published 2022-08-31. Last modified 2026-06-17.