Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-debuginfo-common-x86_64 | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade perf | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-debug-baseUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-vanillaUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-zteUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade kernel-vanilla-develUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade kernel-vanilla-baseUpgrade dtb-alUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-default | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1028-awsUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-32-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-azure-lts-22.04Upgrade linux-image-dell300xUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-azureUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub