https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-2132.htmlhttps://patchthecve.com/cve/CVE-2022-2132.htmlWed, 17 Jun 2026 04:41:22 +0000HIGH 8.6: A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.https://patchthecve.com/cve/CVE-2022-0669.htmlhttps://patchthecve.com/cve/CVE-2022-0669.htmlWed, 17 Jun 2026 04:21:02 +0000MEDIUM 6.5: A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user masthttps://patchthecve.com/cve/CVE-2021-3839.htmlhttps://patchthecve.com/cve/CVE-2021-3839.htmlWed, 17 Jun 2026 04:05:52 +0000HIGH 7.5: A flaw was found in the vhost library in DPDK. Function vhost_user_set_inflight_fd() does not validate `msg->payload.inflight.num_queues`, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability.