NVIDIA Mellanox DPDK Poll Mode Driver Information Disclosure and Denial-of-Service Vulnerability

A vulnerability has been identified in the NVIDIA Mellanox DPDK Poll Mode Driver (PMD) that allows an attacker on a virtual machine (VM) within the system to potentially disclose information and cause a denial-of-service on the network interface. This vulnerability affects all versions of NVIDIA Mellanox DPDK prior to 22.11_2504.1.0, as well as earlier evaluation versions of DPDK 20.11.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure and disruption of network services, causing a denial-of-service condition on the affected interface.

Remediation

Users are advised to update to NVIDIA Mellanox DPDK version 22.11_2504.1.0 or later. For earlier evaluation versions, contact your account manager to access the updated version through NVOnline.