CVE-2022-0669 is a medium-severity flaw (CVSS 6.5) affecting data plane development kit, openvswitch, openshift container platform. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-0669?
data plane development kit: upgrade to 22.03; openvswitch: downgrade or apply the listed mitigation; openshift container platform: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2022-0669 being exploited?
CVE-2022-0669 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-0669 affect?
CVE-2022-0669 affects data plane development kit, openvswitch, openshift container platform. Severity is medium (CVSS 6.5). A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave
PatchTheCVE