Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.304-226.531 | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-tools | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-vanilla-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debug-baseUpgrade dtb-zteUpgrade dtb-amazonUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-baseUpgrade kernel-azure-optionalUpgrade dtb-alUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-zfcpdump-man | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1017-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-oracleUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-236-genericUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-58-genericUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-32-generic-64k | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub