Integer Overflow Vulnerability in DPDK Affects Multiple Versions

CVE-2020-10722

What is CVE-2020-10722?

A vulnerability has been identified in Data Plane Development Kit (DPDK) affecting versions 18.05 and later. This issue arises from a missing validation for integer overflow in the function vhost_user_set_log_base(). As a consequence, the memory map size requested may be smaller than intended, potentially leading to memory corruption. This could expose systems to a range of risks, including unauthorized access or unexpected behavior. It's imperative for users to update to patched versions to mitigate this risk.

References