Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-4.14.304-226.531Upgrade bpftool-debuginfo | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade python3-perf | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-vanilla-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-default-manUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade dtb-alUpgrade kernel-vanillaUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade dtb-zteUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-vanilla-develUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-vanilla-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rt | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-202-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1115-awsUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-oem-22.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1101-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1017-azureUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.19.0-1012-raspi-nolpae | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub