Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade bpftool-debuginfoUpgrade python-perf | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade python3-perf | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-vanilla-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-rt-develUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-alUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-zteUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-vanilla-baseUpgrade dtb-hisiliconUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-vanilla-develUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-202-genericUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1101-azureUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1028-awsUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-dell300xUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.4 | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub