CVE-2022-28199
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in...
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
6.5
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Record
CVE-2022-28199- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-1284
- Updated
- 2026-11-02
EUVDEUVD-2022-32653
6.5
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Record
EUVD-2022-32653- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x5mv-h4g3-j3r2
6.5
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in...
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Record
GHSA-x5mv-h4g3-j3r2- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
6.5
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Record
CVE-2022-28199- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Weakness
- CWE-1284, CWE-20
- Updated
- 2026-11-02
OSV
6.5
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Record
CVE-2022-28199- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2022-1965
8.6
dpdk security update
DPDK core includes kernel modules, core libraries and tools.testpmd application allows to test fast packet processing environments on arm64 platforms. For instance, it can be used to check that environment can support fast path applications such as 6WINDGate, pktgen, rumptcpip, etc. More libraries are available as extensions in other packages.
Security Fix(es):
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.(CVE-2022-28199)
- Record
OESA-2022-1965- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSVRHSA-2022:6502
6.5
Red Hat Security Advisory: openvswitch2.13 security update
- Record
RHSA-2022:6502- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:6503
6.5
Red Hat Security Advisory: openvswitch2.17 security update
- Record
RHSA-2022:6503- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:6504
6.5
Red Hat Security Advisory: openvswitch2.17 security update
- Record
RHSA-2022:6504- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:6505
6.5
Red Hat Security Advisory: openvswitch2.15 security update
- Record
RHSA-2022:6505- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:6506
6.5
Red Hat Security Advisory: openvswitch2.16 security update
- Record
RHSA-2022:6506- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:8263
8.6
Red Hat Security Advisory: dpdk security and bug fix update
- Record
RHSA-2022:8263- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2022:8263
8.6
Important: dpdk security and bug fix update
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.
Security Fix(es):
-
dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)
-
DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839)
-
dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.
- Record
RLSA-2022:8263- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-28199
8.6
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Record
UBUNTU-CVE-2022-28199- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2022:8263 No score
Important: dpdk security and bug fix update
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.
Security Fix(es):
- dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs (CVE-2022-2132)
- DPDK: out-of-bounds read/write in vhost_user_set_inflight_fd() may lead to crash (CVE-2021-3839)
- dpdk: error recovery in mlx5 driver not handled properly, allowing for denial of service (CVE-2022-28199)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2022:8263- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-28199 No score
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
- Record
DEBIAN-CVE-2022-28199- Updated
- 2026-11-03
OSVSUSE-SU-2022:3341-1 No score
Security update for dpdk
This update for dpdk fixes the following issues:
- CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).
- CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).
- Record
SUSE-SU-2022:3341-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3390-1 No score
Security update for dpdk
This update for dpdk fixes the following issues:
- CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).
- CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).
- Record
SUSE-SU-2022:3390-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3429-1 No score
Security update for dpdk
This update for dpdk fixes the following issues:
- CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).
- CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).
- Record
SUSE-SU-2022:3429-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dpdkAlmaLinux:9 From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-develAlmaLinux:9 From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-docAlmaLinux:9 From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-toolsAlmaLinux:9 From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdkDebian:12 |
before 22.11.1-2 | 22.11.1-2 |
dpdkDebian:13 |
before 22.11.1-2 | 22.11.1-2 |
dpdkDebian:14 |
before 22.11.1-2 | 22.11.1-2 |
dpdkDebian:11 From an advisory covering 2 CVEs |
before 20.11.6-1~deb11u1, plus listed versions 20.11-720.11.1-120.11.1-220.11.1-320.11.1-4 Show 9 moreShow less20.11.2-120.11.3-120.11.3-1~deb11u120.11.3-220.11.4-120.11.4-220.11.4-2~deb11u120.11.5-120.11.5-1~deb11u1 |
20.11.6-1~deb11u1 |
dpdkopenEuler:20.03-LTS-SP1 |
before 19.11-20.oe1 | 19.11-20.oe1 |
dpdkopenEuler:20.03-LTS-SP3 |
before 19.11-20.oe1 | 19.11-20.oe1 |
Show 75 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dpdkopenEuler:22.03-LTS |
before 21.11-17.oe2203 | 21.11-17.oe2203 |
network-scripts-openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
openvswitch2.13-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
openvswitch2.13-debugsourceRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
openvswitch2.13-develRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
openvswitch2.13-ipsecRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
openvswitch2.13-testRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
python3-openvswitch2.13Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
python3-openvswitch2.13-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.13.0-193.3.el8fdp | 0:2.13.0-193.3.el8fdp |
openvswitch2.17Red Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
openvswitch2.17-debuginfoRed Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
openvswitch2.17-debugsourceRed Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
openvswitch2.17-develRed Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
openvswitch2.17-ipsecRed Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
openvswitch2.17-testRed Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
python3-openvswitch2.17Red Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
python3-openvswitch2.17-debuginfoRed Hat:enterprise_linux:9::fastdatapath |
before 0:2.17.0-32.4.el9fdp | 0:2.17.0-32.4.el9fdp |
network-scripts-openvswitch2.17Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
openvswitch2.17Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
openvswitch2.17-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
openvswitch2.17-debugsourceRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
openvswitch2.17-develRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
openvswitch2.17-ipsecRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
openvswitch2.17-testRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
python3-openvswitch2.17Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
python3-openvswitch2.17-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.17.0-37.4.el8fdp | 0:2.17.0-37.4.el8fdp |
network-scripts-openvswitch2.15Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
openvswitch2.15Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
openvswitch2.15-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
openvswitch2.15-debugsourceRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
openvswitch2.15-develRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
openvswitch2.15-ipsecRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
openvswitch2.15-testRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
python3-openvswitch2.15Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
python3-openvswitch2.15-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.15.0-113.3.el8fdp | 0:2.15.0-113.3.el8fdp |
network-scripts-openvswitch2.16Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
openvswitch2.16Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
openvswitch2.16-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
openvswitch2.16-debugsourceRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
openvswitch2.16-develRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
openvswitch2.16-ipsecRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
openvswitch2.16-testRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
python3-openvswitch2.16Red Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
python3-openvswitch2.16-debuginfoRed Hat:enterprise_linux:8::fastdatapath |
before 0:2.16.0-89.3.el8fdp | 0:2.16.0-89.3.el8fdp |
dpdkRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-develRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-docRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdk-toolsRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdkRocky Linux:9 From an advisory covering 3 CVEs |
before 2:21.11.2-1.el9_1 | 2:21.11.2-1.el9_1 |
dpdkSUSE:Linux Enterprise Module for Server Applications 15 SP4 From an advisory covering 2 CVEs |
before 19.11.10-150400.4.7.1 | 19.11.10-150400.4.7.1 |
dpdk-thunderxSUSE:Linux Enterprise Module for Server Applications 15 SP4 From an advisory covering 2 CVEs |
before 19.11.10-150400.4.7.1 | 19.11.10-150400.4.7.1 |
dpdkopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 19.11.10-150400.4.7.1 | 19.11.10-150400.4.7.1 |
dpdk-thunderxopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 19.11.10-150400.4.7.1 | 19.11.10-150400.4.7.1 |
dpdkSUSE:Linux Enterprise Module for Server Applications 15 SP3 From an advisory covering 2 CVEs |
before 19.11.4-150300.16.1 | 19.11.4-150300.16.1 |
dpdk-thunderxSUSE:Linux Enterprise Module for Server Applications 15 SP3 From an advisory covering 2 CVEs |
before 19.11.4-150300.16.1 | 19.11.4-150300.16.1 |
dpdkopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 19.11.4-150300.16.1 | 19.11.4-150300.16.1 |
dpdk-thunderxopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 19.11.4-150300.16.1 | 19.11.4-150300.16.1 |
dpdkSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdk-thunderxSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdk-thunderxSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdk-thunderxSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Manager Proxy 4.1 From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Manager Retail Branch Server 4.1 From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Manager Server 4.1 From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkSUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdk-thunderxSUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 19.11.4-150200.3.20.1 | 19.11.4-150200.3.20.1 |
dpdkUbuntu:20.04:LTS |
before 19.11.13-0ubuntu0.20.04.1, plus listed versions 18.11.2-418.11.3-118.11.4-118.11.4-1ubuntu118.11.5-1 Show 11 moreShow less19.11-2ubuntu119.11-2ubuntu219.11.1-0ubuntu119.11.1-0ubuntu1.119.11.3-0ubuntu0.119.11.3-0ubuntu0.219.11.6-0ubuntu0.20.04.119.11.7-0ubuntu0.20.04.119.11.7-0ubuntu0.20.04.219.11.10-0ubuntu0.20.04.119.11.12-0ubuntu0.20.04.1 |
19.11.13-0ubuntu0.20.04.1 |
dpdkUbuntu:22.04:LTS |
before 21.11.2-0ubuntu0.22.04.1, plus listed versions 20.11.3-0ubuntu120.11.3-0ubuntu321.11-121.11-1build121.11.1-0ubuntu0.3 |
21.11.2-0ubuntu0.22.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-28199 is a medium vulnerability (CVSS 6.5) in Nvidia Data Plane Development Kit, published August 30, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. Fixed in dpdk 22.11.1-2.
References
nvidia.custhelp.com/app/answers/detail/a_id/5389
openwall.com/lists/oss-security/2022/09/06/2
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlx5-jbPCrqD8
nvd.nist.gov/vuln/detail/CVE-2022-28199
github.com/advisories/GHSA-x5mv-h4g3-j3r2
access.redhat.com/errata/RHSA-2022:8263
Show 44 moreShow less
access.redhat.com/security/cve/CVE-2021-3839
access.redhat.com/security/cve/CVE-2022-2132
access.redhat.com/security/cve/CVE-2022-28199
bugzilla.redhat.com/2025882
bugzilla.redhat.com/2099475
bugzilla.redhat.com/2123549
errata.almalinux.org/9/ALSA-2022-8263.html
security-tracker.debian.org/tracker/CVE-2022-28199
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1965
access.redhat.com/errata/RHSA-2022:6502
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2123549
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6502.json
cve.org/CVERecord?id=CVE-2022-28199
access.redhat.com/errata/RHSA-2022:6503
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6503.json
access.redhat.com/errata/RHSA-2022:6504
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6504.json
access.redhat.com/errata/RHSA-2022:6505
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6505.json
access.redhat.com/errata/RHSA-2022:6506
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6506.json
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=2025882
bugzilla.redhat.com/show_bug.cgi?id=2070583
bugzilla.redhat.com/show_bug.cgi?id=2099475
bugzilla.redhat.com/show_bug.cgi?id=2126159
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8263.json
cve.org/CVERecord?id=CVE-2021-3839
nvd.nist.gov/vuln/detail/CVE-2021-3839
cve.org/CVERecord?id=CVE-2022-2132
nvd.nist.gov/vuln/detail/CVE-2022-2132
bugs.dpdk.org/show_bug.cgi?id=1031
errata.rockylinux.org/RLSA-2022:8263
suse.com/support/update/announcement/2022/suse-su-20223341-1
bugzilla.suse.com/1202903
bugzilla.suse.com/1202956
suse.com/security/cve/CVE-2022-2132
suse.com/security/cve/CVE-2022-28199
suse.com/support/update/announcement/2022/suse-su-20223390-1
suse.com/support/update/announcement/2022/suse-su-20223429-1
ubuntu.com/security/CVE-2022-28199
openwall.com/lists/oss-security/2022/08/29/3
ubuntu.com/security/notices/USN-5608-1