CVE:CVE-2021-3839
CNNVD:CNNVD-202204-4639
DPDK是一款基于Linux平台的数据平面开发套件。该产品支持在多种CPU架构上执行数据包处理。
DPDK 存在安全漏洞，该漏洞源于函数 vhost_user_set_inflight_fd 不验证 msg->payload.inflight.num_queues，可能导致内存读/写越界。
solution:Upgrade dpdk data_plane_development_kit to a higher version than 22.03,22.03:rc1,22.03:rc2,22.03:rc3,and avoid the version (,22.03),22.03:rc1,22.03:rc2,22.03:rc3; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade redhat enterprise_linux_fast_datapath to a higher version than 7.0,8.0,and avoid the version 7.0,8.0