Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.15.86-53.137Upgrade perf-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-tools | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-alUpgrade kernel-syms-azureUpgrade kernel-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-zteUpgrade dtb-freescaleUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-debug-baseUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-vanilla-baseUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-zfcpdump-manUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-vanilla-develUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-vanilla-livepatch-develUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-armUpgrade dlm-kmp-azure | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-dell300xUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1017-azureUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-5.19.0-1017-aws | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub