CVE-2020-14378

Name of the Vulnerable Software and Affected Versions dpdk versions prior to 18.11.10 dpdk versions prior to 19.11.5

Description An integer underflow in the move desc function can cause large amounts of CPU cycles to be consumed in a long-running loop. An attacker could cause move desc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhost crypto is used, this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.

Recommendations For dpdk versions prior to 18.11.10, update to version 18.11.10 or later to resolve the issue. For dpdk versions prior to 19.11.5, update to version 19.11.5 or later to resolve the issue. As a temporary workaround, consider disabling the move desc function until a patch is available. Restrict access to the vhost crypto module to minimize the risk of exploitation.