Ubuntu alert USN-7816-1 (dpdk)

From:
             
 
Marc Deslauriers <marc.deslauriers@canonical.com>
To:
             
 
"ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com>
Subject:
             
 
[USN-7816-1] DPDK vulnerability
Date:
             
 
Thu, 09 Oct 2025 13:41:45 -0400
Message-ID:
             
 
<8b22d262-c03a-4891-ad76-3a9f68cfcbbe@canonical.com>
==========================================================================
Ubuntu Security Notice USN-7816-1
October 09, 2025

dpdk vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

DPDK could be made to crash if it received specially crafted network
traffic.

Software Description:
- dpdk: set of libraries for fast packet processing

Details:

It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode
driver. An attacker could possibly use this issue to obtain sensitive
information, or cause the network interface to crash, resulting in a denial
of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
   dpdk                            24.11.2-0ubuntu0.25.04.2

Ubuntu 24.04 LTS
   dpdk                            23.11.4-0ubuntu0.24.04.2

Ubuntu 22.04 LTS
   dpdk                            21.11.9-0ubuntu0.22.04.2

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-7816-1
   CVE-2025-23259

Package Information:
   https://launchpad.net/ubuntu/+source/dpdk/24.11.2-0ubuntu...
   https://launchpad.net/ubuntu/+source/dpdk/23.11.4-0ubuntu...
   https://launchpad.net/ubuntu/+source/dpdk/21.11.9-0ubuntu...



Attachment: OpenPGP_signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=0EfQ
-----END PGP SIGNATURE-----