CVE-2022-0669: 
NixOS vulnerability analysis and mitigation

CVE-2022-0669 is a vulnerability discovered in the Data Plane Development Kit (DPDK) that affects versions from 19.11-rc1 up to (excluding) 22.03. The vulnerability was reported on February 17, 2022, and was assigned a CVSS v3.1 base score of 6.5 (Medium) (NVD).

The vulnerability exists in the handling of vhost-user inflight type messages. The flaw allows a malicious vhost-user master to attach an unexpected number of file descriptors (fds) as ancillary data to VHOSTUSERGETINFLIGHTFD and VHOSTUSERSETINFLIGHTFD messages that are not properly closed by the vhost-user slave. The issue was introduced with commit d87f1a1cb7b6 'vhost: support inflight info sharing' (DPDK Bug).

By continuously sending messages with unclosed file descriptors, an attacker can exhaust available file descriptors in the vhost-user slave process, leading to a denial of service condition. This can affect the availability of the system running the vulnerable DPDK version (NVD).

The vulnerability was fixed in DPDK version 22.03 through commit af74f7db384ed149fe42b21dbd7975f8a54ef227, which added checks for handling vhost-user messages. Users are advised to upgrade to DPDK version 22.03 or later to address this vulnerability (DPDK Commit).