GPU VulnDB

Database/NVIDIA / GPU stack

NVIDIA MLNX_DPDK: Improper error recovery in NVIDIA's DPDK distribution lets a remote attacker cause denial of service

CVE-2022-28199NVIDIA / GPU stackcurated

Impact

Improper error recovery in NVIDIA's DPDK distribution lets a remote attacker cause denial of service with some integrity and confidentiality impact. Relevant on DPDK-based storage and network dataplanes fronting GPU clusters.

Who can reach it

Network - the attacker sends traffic that the DPDK dataplane mishandles. No authentication involved; this is packet-level reachability.

What to do

Update MLNX_DPDK per bulletin 5389 and restart the dataplane application. Cost: a dataplane restart drops in-flight connections; on a storage path that means an I/O stall visible to running jobs, so drain or fail over first.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-28199https://github.com/NVIDIA/product-security/tree/main/2022/5389

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.