mir/ovs
2
0
Fork 0
mirror of https://github.com/openvswitch/ovs synced 2025-08-22 01:51:26 +00:00
Code Issues Releases Wiki Activity

dpdk: Use DPDK 21.11.2 release.

Browse Source 
Update OVS CLI and relevant documentation to use DPDK 21.11.2.

DPDK 21.11.2 contains fixes for the CVEs listed below:
CVE-2022-28199 [1]
CVE-2022-2132 [2]

A bug was introduced in DPDK 21.11.1 by the commit

01e3dee29c02 ("vhost: fix unsafe vring addresses modifications").

This bug can cause a deadlock when vIOMMU is enabled and NUMA
reallocation of the virtqueues happen.
A fix [3] has been posted and pushed to the DPDK 21.11 branch.

If a user wishes to avoid the issue then it is recommended to use
DPDK 21.11.0 until the release of DPDK 21.11.3.
It should be noted that DPDK 21.11.0 does not benefit from the
numerous bug and CVE fixes addressed since its release.
If a user wishes to benefit from these fixes it is recommended to
use DPDK 21.11.2.

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28199
[2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2132
[3] https://patches.dpdk.org/project/dpdk/patch/20220725203206.427083-2-david.marchand@redhat.com/

Signed-off-by: Michael Phelan <michael.phelan@intel.com>
Acked-by: Kevin Traynor <ktraynor@redhat.com>
Signed-off-by: Ian Stokes <ian.stokes@intel.com>
This commit is contained in:
Michael Phelan 2022-09-21 15:08:47 +00:00 committed by Ian Stokes
parent 5a686267d3
commit 9b1a897e25
4 changed files with 29 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.ci/linux-build.sh
View File

@ -228,7 +228,7 @@ fi
if [ "$DPDK" ] || [ "$DPDK_SHARED" ]; then
if [ -z "$DPDK_VER" ]; then
DPDK_VER="21.11.1"
DPDK_VER="21.11.2"
fi
install_dpdk $DPDK_VER
fi

12
Documentation/faq/releases.rst
View File

@ -211,12 +211,12 @@ Q: What DPDK version does each Open vSwitch release work with?
2.10.x 17.11.10
2.11.x 18.11.9
2.12.x 18.11.9
2.13.x 19.11.10
2.14.x 19.11.10
2.15.x 20.11.4
2.16.x 20.11.4
2.17.x 21.11.1
3.0.x 21.11.1
2.13.x 19.11.13
2.14.x 19.11.13
2.15.x 20.11.6
2.16.x 20.11.6
2.17.x 21.11.2
3.0.x 21.11.2
============ ========
Q: Are all the DPDK releases that OVS versions work with maintained?

8
Documentation/intro/install/dpdk.rst
View File

@ -42,7 +42,7 @@ Build requirements
In addition to the requirements described in :doc:`general`, building Open
vSwitch with DPDK will require the following:
- DPDK 21.11.1
- DPDK 21.11.2
- A `DPDK supported NIC`_
@ -73,9 +73,9 @@ Install DPDK
#. Download the `DPDK sources`_, extract the file and set ``DPDK_DIR``::
$ cd /usr/src/
$ wget https://fast.dpdk.org/rel/dpdk-21.11.1.tar.xz
$ tar xf dpdk-21.11.1.tar.xz
$ export DPDK_DIR=/usr/src/dpdk-stable-21.11.1
$ wget https://fast.dpdk.org/rel/dpdk-21.11.2.tar.xz
$ tar xf dpdk-21.11.2.tar.xz
$ export DPDK_DIR=/usr/src/dpdk-stable-21.11.2
$ cd $DPDK_DIR
#. Configure and install DPDK using Meson

18
NEWS
View File

@ -5,6 +5,24 @@ Post-v3.0.0
"--names" option.
- Windows:
* Conntrack IPv6 fragment support.
- DPDK:
* OVS validated with DPDK 21.11.2.
DPDK 21.11.2 contains fixes for the following CVEs:
CVE-2022-28199 cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28199
CVE-2022-2132 cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2132
A bug was introduced in DPDK 21.11.1 by the commit
01e3dee29c02 ("vhost: fix unsafe vring addresses modifications").
This bug can cause a deadlock when vIOMMU is enabled and NUMA
reallocation of the virtqueues happen.
A fix has been posted and pushed to the DPDK 21.11 branch.
It can be found here:
https://patches.dpdk.org/project/dpdk/patch/20220725203206.427083-2-david.marchand@redhat.com/.
If a user wishes to avoid the issue then it is recommended to use
DPDK 21.11.0 until the release of DPDK 21.11.3.
It should be noted that DPDK 21.11.0 does not benefit from the numerous
bug and CVE fixes addressed since its release.
If a user wishes to benefit from these fixes it is recommended to use
DPDK 21.11.2.
v3.0.0 - 15 Aug 2022