Alerts This Week
Warning Icon 1 1,220
Alerts This Week
Warning Icon 1 1,220

Ubuntu 24.10: USN-7178-1 critical: DPDK denial of service

ubuntu
Calendar Grey December 19, 2024
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-7179-1 highlights vulnerabilities in OpenSSL due to specifically designed requests that could lead to service disruptions.
DPDK could be made to crash if it received specially crafted network traffic.

Summary

DPDK could be made to crash if it received specially crafted network

traffic.

Software Description:

- dpdk: set of libraries for fast packet processing

Details:

It was discovered that DPDK incorrectly handled the Vhost library checksum

offload feature. An malicious guest could possibly use this issue to cause

the hypervisor's vSwitch to crash, resulting in a denial of service.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   dpdk                            23.11.2-0ubuntu1.1

Ubuntu 24.04 LTS
   dpdk                            23.11-1ubuntu0.1

Ubuntu 22.04 LTS
   dpdk                            21.11.6-0ubuntu0.22.04.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7178-1

CVE-2024-11614

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7178-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here