Description
A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Fast Datapath for RHEL 10
Default version status: affected
Red Hat Fast Datapath for RHEL 10
Default version status: affected
Red Hat Fast Datapath for RHEL 10
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 8
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Fast Datapath for RHEL 9
Default version status: affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat OpenStack Platform 13 (Queens)
Default version status: affected