Description

An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset.

INFO

Published Date :

2024-12-18T08:30:49.729Z

Last Modified :

2025-11-20T00:59:36.216Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2024-11614 vulnerability.

Vendors Products
Redhat
  • Enterprise Linux
  • Openshift
  • Rhel Aus
  • Rhel E4s
  • Rhel Eus
  • Rhel Tus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-11614.

URL Resource
http://www.openwall.com/lists/oss-security/2024/12/17/3 cve-icon
https://access.redhat.com/errata/RHSA-2025:0208 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:0209 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:0210 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:0211 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:0220 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:0221 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:0222 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:3963 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:3964 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:3965 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:3970 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-11614 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2327955 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-11614 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-11614 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact