Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade bpftool-debuginfoUpgrade kernel-headers | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-tools-devel | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade dtb-amdUpgrade kernel-defaultUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-debug-baseUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade dtb-zteUpgrade dtb-xilinxUpgrade kernel-preempt-develUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-zfcpdump-manUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-preemptUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade kernel-vanilla-baseUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-vanillaUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade dtb-alUpgrade kernel-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-devel | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1101-azureUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-dell300xUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.19.0-29-generic | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub