Dpdk · Dpdk'S Vhost Library · CVE-2024-11614
**Name of the Vulnerable Software and Affected Versions**
DPDK's Vhost library (affected versions not specified)
**Description**
An out-of-bounds read issue was found in the checksum offload feature of DPDK's Vhost library. This allows an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors, causing out-of-bounds reads. An attacker with a malicious VM using a Virtio driver can crash the vhost-user side by sending a packet with a Tx checksum offload request and an invalid `csum start` offset.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.