Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.304-226.531Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-livepatch-5.10.162-141.675Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfo | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headers | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade dtb-zteUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade dtb-alUpgrade kernel-zfcpdump-manUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-default-manUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-apmUpgrade dtb-amlogic | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-awsUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-oemUpgrade linux-image-ibmUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-1017-awsUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-dell300xUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-virtualUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1094-awsUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1028-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.19.0-1012-raspi | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub