CVE-2020-10726

A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.

• CWE-190
• CWE-190

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.htmlMailing List, Third Party Advisory
• https://bugs.dpdk.org/show_bug.cgi?id=271Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10726Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/
• https://www.openwall.com/lists/oss-security/2020/05/18/2Mailing List, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlPatch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.htmlMailing List, Third Party Advisory
• https://bugs.dpdk.org/show_bug.cgi?id=271Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10726Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/
• https://www.openwall.com/lists/oss-security/2020/05/18/2Mailing List, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlPatch, Third Party Advisory

Published

May 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10720A flaw was found in the Linux kernel's implementation of GRO…5.5
• CVE-2020-10721A flaw was found in the fabric8-maven-plugin 4.0.0 and later…7.8
• CVE-2020-10722A vulnerability was found in DPDK versions 18.05 and above. …6.7
• CVE-2020-10723A memory corruption issue was found in DPDK versions 17.05 a…6.7
• CVE-2020-10724A vulnerability was found in DPDK versions 18.11 and above. …4.4
• CVE-2020-10725A flaw was found in DPDK version 19.11 and above that allows…7.7
• CVE-2020-10727A flaw was found in ActiveMQ Artemis management API from ver…5.5
• CVE-2020-10728A flaw was found in automationbroker/apb container in versio…7.8
• CVE-2020-10729A flaw was found in the use of insufficiently random values …5.5
• CVE-2020-1073A remote code execution vulnerability exists in the way that…8.1
• CVE-2020-10730A NULL pointer dereference, or possible use-after-free flaw …6.5
• CVE-2020-10731A flaw was found in the nova_libvirt container provided by t…9.9