Riskcovery

CVE-2024-11614

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

State
Published
Severity
7.4 High
Published
Dec 18, 2024
Updated
Nov 20, 2025
Reserved
Nov 22, 2024

Read the record on cve.org

Description

An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.

Scores

CVSSScoreVectorSource
3.07.4 HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hredhat

Weaknesses

Affected Products

ProductVersions
dpdk
  • 21.05 to before 21.11-4Affected
Fast Datapath for Red Hat Enterprise Linux 8Red Hat
  • 0:3.1.0-159.el8fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat
  • 0:3.1.0-149.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat
  • 0:3.3.0-92.el9fdp and laterNot affected
Fast Datapath for Red Hat Enterprise Linux 9Red Hat
  • 0:3.4.0-48.el9fdp and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:23.11-2.el8_10 and laterNot affected
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat
  • 0:21.11-3.el8_6 and laterNot affected
Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceRed Hat
  • 0:21.11-3.el8_6 and laterNot affected
Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsRed Hat
  • 0:21.11-3.el8_6 and laterNot affected
Red Hat Enterprise Linux 8.8 Extended Update SupportRed Hat
  • 0:21.11-4.el8_8 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 2:23.11-2.el9_5 and laterNot affected
Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsRed Hat
  • 2:21.11-3.el9_0 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat
  • 2:22.11-4.el9_2 and laterNot affected
Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat
  • 2:23.11-2.el9_4 and laterNot affected
Fast Datapath for RHEL 7Red Hat
    Fast Datapath for RHEL 7Red Hat
      Fast Datapath for RHEL 7Red Hat
        Fast Datapath for RHEL 7Red Hat
          Fast Datapath for RHEL 7Red Hat
            Fast Datapath for RHEL 8Red Hat
              Fast Datapath for RHEL 8Red Hat
                Fast Datapath for RHEL 8Red Hat
                  Fast Datapath for RHEL 8Red Hat
                    Fast Datapath for RHEL 8Red Hat
                      Fast Datapath for RHEL 8Red Hat
                        Fast Datapath for RHEL 9Red Hat
                          Fast Datapath for RHEL 9Red Hat
                            Fast Datapath for RHEL 9Red Hat
                              Red Hat OpenShift Container Platform 4Red Hat
                                Red Hat OpenShift Container Platform 4Red Hat
                                  Red Hat OpenShift Container Platform 4Red Hat
                                    Red Hat OpenShift Container Platform 4Red Hat

                                      References

                                      Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.