PatchTheCVEdpdk vulnerabilities
Recent CVEs affecting dpdk products. 3 tracked.
dpdk has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-08-31. Highest priority: CVE-2022-2132 (score 66/100).
- CVE-2022-2132 HIGH 8.6 UPGRADE MITIGATE A permissive list of allowed inputs flaw was found in DPDK
- CVE-2022-0669 MEDIUM 6.5 UPGRADE DOWNGRADE A flaw was found in dpdk
- CVE-2021-3839 HIGH 7.5 UPGRADE MITIGATE A flaw was found in the vhost library in DPDK
FAQ
How do I fix dpdk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dpdk being exploited right now?
None of the tracked dpdk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dpdk CVE should I patch first?
CVE-2022-2132 currently ranks highest (66/100): A permissive list of allowed inputs flaw was found in DPDK.