CVE-2024-11614
NONE EPSS 41.9%
Published Dec 18, 20241y ago · Modified Jun 17, 20261w ago
Published Dec 18, 2024 1y ago
Last Modified Jun 17, 2026 1w ago
Description
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.
Threat Intelligence
EPSS Exploit Probability
41.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-125 Out-of-bounds Read Memory Safety
References 14
- openwall.com http://www.openwall.com/lists/oss-security/2024/12/17/3
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:0208
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:0209
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:0210
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:0211
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:0220
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:0221
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:0222
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:3963
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:3964
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:3965
- access.redhat.com https://access.redhat.com/errata/RHSA-2025:3970
- access.redhat.com https://access.redhat.com/security/cve/CVE-2024-11614
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2327955
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.