CVE-2022-28199
Summary
| CVE | CVE-2022-28199 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-09-01 17:15:00 UTC |
| Updated | 2022-09-07 18:15:00 UTC |
| Description | NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| oss-security - Re: CVE-2022-28199: DPDK mlx5 driver error recovery handling vulnerability |
MLIST |
www.openwall.com |
|
| 20220907 Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022 |
CISCO |
tools.cisco.com |
|
| Security Bulletin: NVIDIA Data Plane Development Kit (MLNX_DPDK) - August 2022 | NVIDIA |
MISC |
nvidia.custhelp.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160307 Oracle Enterprise Linux Security Update for dpdk (ELSA-2022-8263)
- 180981 Debian Security Update for dpdk (DSA 5222-1)
- 182065 Debian Security Update for dpdk (CVE-2022-28199)
- 240900 Red Hat Update for dpdk (RHSA-2022:8263)
- 672369 EulerOS Security Update for dpdk (EulerOS-SA-2022-2761)
- 672383 EulerOS Security Update for dpdk (EulerOS-SA-2022-2726)
- 672435 EulerOS Security Update for dpdk (EulerOS-SA-2022-2843)
- 672445 EulerOS Security Update for dpdk (EulerOS-SA-2022-2818)
- 752630 SUSE Enterprise Linux Security Update for dpdk (SUSE-SU-2022:3429-1)
- 753388 SUSE Enterprise Linux Security Update for dpdk (SUSE-SU-2022:3341-1)
- 753435 SUSE Enterprise Linux Security Update for dpdk (SUSE-SU-2022:3390-1)
- 940804 AlmaLinux Security Update for dpdk (ALSA-2022:8263)
- 960601 Rocky Linux Security Update for dpdk (RLSA-2022:8263)