Threats tagged 'ghsa-x59g-22jw-gfvw'

A time-of-check to time-of-use (TOCTOU) double-fetch vulnerability in the DPDK lib/vhost component allows a heap buffer overflow via attacker-controlled content in the VDUSE control-queue handler. This flaw can lead to high impact on confidentiality, integrity, and availability. Red Hat has issued an important security update addressing this vulnerability in their DPDK packages for Red Hat Enterprise Linux 10.