Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade perf-debuginfo | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-vanilla-baseUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-preempt-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade dtb-zteUpgrade kernel-debug-baseUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-vanillaUpgrade dtb-qcomUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade cluster-md-kmp-rt | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-236-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1159-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.19.0-1017-azureUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-1017-awsUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragonUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-202-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1027-gke | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub