An integer underflow flaw was found in the move_desc
function that can lead to large amounts of CPU cycles being consumed in a long-running loop. This flaw allows an attacker to cause move_desc
to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhost_crypto
is being used, this issue could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period. The highest threat from this vulnerability is to system availability.