Out-of-Bounds Write in DPDK vhost-crypto Backend

Executive Summary

This vulnerability is an out-of-bounds write flaw in DPDK's lib/vhost vhost-crypto component. A guest can supply a malicious avail-ring descriptor index that bypasses bounds checking, causing the host's vhost-crypto backend to write outside intended memory regions. This occurs due to improper validation of guest-controlled indices against queue sizes.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking if vhost-crypto is enabled and if virtio-crypto vhost-user devices are attached to untrusted guests. Inspect DPDK and vhost-crypto configurations, and monitor for out-of-bounds write attempts in vhost-crypto backend logs.

Useful 0 Not Useful 0

Impact Analysis

An attacker with access to a guest system could exploit this to corrupt memory on the host, potentially leading to denial-of-service conditions, unauthorized code execution, or data corruption. The impact depends on whether vhost-crypto is enabled in your environment.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized memory corruption or denial-of-service conditions through out-of-bounds writes. Such conditions may lead to data integrity issues or unauthorized access, which are critical concerns under these regulations. The availability impact classified as High further exacerbates risks to data availability and integrity.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately avoid attaching virtio-crypto vhost-user backends to untrusted guests. Disable vhost-crypto if not required. Apply patches or updates from Red Hat when available. Monitor for unusual memory corruption or denial-of-service events in vhost-crypto components.

Useful 0 Not Useful 0