CVE-2022-0669

Name of the Vulnerable Software and Affected Versions DPDK (affected versions not specified)

Description The issue is related to an uncontrolled resource consumption in the DPDK library and driver set, which can lead to a denial of service. A malicious vhost-user master can attach an unexpected number of file descriptors as ancillary data to VHOST USER GET INFLIGHT FD and VHOST USER SET INFLIGHT FD messages, causing the vhost-user slave process to exhaust available file descriptors when these messages are sent continuously.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.