https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:42:18.117955+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:8263 ALSA-2022:8263 — Important: dpdk security and bug fix update 2026-10-03T18:42:18.132426+00:00

Affected: AlmaLinux:9: dpdk, AlmaLinux:9: dpdk-devel, AlmaLinux:9: dpdk-doc, AlmaLinux:9: dpdk-tools

The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.

Security Fix(es):

* dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132) * DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839) * dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05391 bdu:2022-05391 2026-10-03T18:42:18.132495+00:00 bdu:2022-05391 https://cve.radiocsirt.org/vuln/certfr-2022-avi-806 certfr-2022-avi-806 — De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaqu… 2026-10-03T18:42:18.132513+00:00 certfr-2022-avi-806 https://cve.radiocsirt.org/vuln/cisco-sa-mlx5-jbpcrqd8 cisco-sa-mlx5-jbPCrqD8 — Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022 2026-10-03T18:42:18.132530+00:00

On August 29, 2022, NVIDIA announced the following vulnerability with a medium impact: CVE-2022-28199: Security Bulletin: NVIDIA Data Plane Development Kit (MLNX_DPDK) - August 2022 For a description of this vulnerability, see Security Bulletin: NVIDIA Data Plane Development Kit (MLNX_DPDK) - August 2022 ["https://nvidia.custhelp.com/app/answers/detail/a_id/5389"]. This advisory will be updated as additional information becomes available.

 https://cve.radiocsirt.org/vuln/euvd-2026-15639 EUVD-2026-15639 2026-10-03T18:42:18.132553+00:00 EUVD-2026-15639 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28199 fkie_cve-2022-28199 2026-10-03T18:42:18.132564+00:00

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-x5mv-h4g3-j3r2 GHSA-x5mv-h4g3-j3r2 2026-10-03T18:42:18.132587+00:00

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2022-28199 gsd-2022-28199 2026-10-03T18:42:18.132603+00:00 gsd-2022-28199 https://cve.radiocsirt.org/vuln/oesa-2022-1965 OESA-2022-1965 — dpdk security update 2026-10-03T18:42:18.132612+00:00

Affected: openEuler:20.03-LTS-SP1: dpdk, openEuler:20.03-LTS-SP3: dpdk, openEuler:22.03-LTS: dpdk

DPDK core includes kernel modules, core libraries and tools.testpmd application allows to test fast packet processing environments on arm64 platforms. For instance, it can be used to check that environment can support fast path applications such as 6WINDGate, pktgen, rumptcpip, etc. More libraries are available as extensions in other packages. Security Fix(es): NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.(CVE-2022-28199)

 https://cve.radiocsirt.org/vuln/rhsa-2022:6502 RHSA-2022:6502 — Red Hat Security Advisory: openvswitch2.13 security update 2026-10-03T18:42:18.132640+00:00

dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service

 https://cve.radiocsirt.org/vuln/rhsa-2022:8263 RHSA-2022:8263 — Red Hat Security Advisory: dpdk security and bug fix update 2026-10-03T18:42:18.132657+00:00

DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service

 https://cve.radiocsirt.org/vuln/suse-su-2022:3390-1 SUSE-SU-2022:3390-1 — Security update for dpdk 2026-10-03T18:42:18.132675+00:00

Security update for dpdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-28199 UBUNTU-CVE-2022-28199 2026-10-03T18:42:18.132688+00:00

Affected: Ubuntu:20.04:LTS: dpdk, Ubuntu:22.04:LTS: dpdk

NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1021 WID-SEC-W-2023-1021 — Oracle Communications: Mehrere Schwachstellen 2026-10-03T18:42:18.132708+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.