CVE-2024-11614
High
Description
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
SeverityHigh
CVSS7.4
Exploit probability—
ProductDpdk
PublishedDec 18, 2024
First seenDec 18, 2024
Weakness typeCWE-125Out-of-bounds read
How to fix
Update
- dpdk21.11-4 or later
Vendor advisories
- access.redhat.com/errata/RHSA-2025:0208
- access.redhat.com/errata/RHSA-2025:0209
- access.redhat.com/errata/RHSA-2025:0210
- access.redhat.com/errata/RHSA-2025:0211
- access.redhat.com/errata/RHSA-2025:0220
- access.redhat.com/errata/RHSA-2025:0221
- access.redhat.com/errata/RHSA-2025:0222
- access.redhat.com/errata/RHSA-2025:3963
- access.redhat.com/errata/RHSA-2025:3964
- access.redhat.com/errata/RHSA-2025:3965
- access.redhat.com/errata/RHSA-2025:3970
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dpdk | 21.05 ≤ v < 21.11-4 | 21.11-4 |
| enterprise_linux 8 | No range specified | — |
| enterprise_linux 9 | No range specified | — |
| rhel_e4s 8.6 | No range specified | — |
| rhel_eus 8.8 | No range specified | — |
| rhel_e4s 9.0 | No range specified | — |
| rhel_eus 9.2 | No range specified | — |
| rhel_eus 9.4 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.