Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.86-53.137Upgrade perfUpgrade kernel-livepatch-5.10.162-141.675Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.304-226.531Upgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfo | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-devel | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dtb-socionextUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-vanilla-livepatch-develUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-vanilla-baseUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-source-vanillaUpgrade dtb-zteUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-debug-baseUpgrade dtb-alUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade kernel-preemptUpgrade kernel-vanilla-develUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade kernel-vanillaUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-64kb | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-29-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-aws-hweUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1094-awsUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1159-azureUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-azure-lts-22.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04 | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub