Out-of-Bounds Read Vulnerability in DPDK's Vhost Library

Summary

CVE-2024-11614 is a critical out-of-bounds read vulnerability discovered in the Vhost library of the DPDK, specifically affecting its checksum offload feature. This vulnerability permits an untrusted or compromised virtual machine (VM) to manipulate the hypervisor's virtual switch (vSwitch) by forging Virtio descriptors, potentially leading to unauthorized out-of-bounds reads and subsequent crashes. An attacker can exploit this flaw by sending a crafted packet containing a transmission checksum offload request along with an invalid checksum start offset. Organizations relying on DPDK for high-performance networking must take immediate action to apply security patches and safeguard their systems against this serious threat.

Refferences