The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 21, 2024 | Sep 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfo | Aug 24, 2023 | Aug 24, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 4, 2023 | Sep 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade perf-debuginfoUpgrade kernel-devel | Feb 17, 2025 | Aug 8, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 21, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Sep 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Sep 22, 2023 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-vanilla-baseUpgrade kernel-vanillaUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-vanilla-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-baseUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade dtb-zteUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade dtb-alUpgrade kernel-rtUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade dlm-kmp-default | Aug 24, 2023 | Aug 23, 2023 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1118-azureUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-nvidiaUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1162-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-intelUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-azureUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-gkeUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1073-bluefield | Sep 18, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub