Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-default-manUpgrade dtb-apmUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade dtb-alUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-defaultUpgrade kernel-debug-baseUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-zteUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-vanilla-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade kernel-symsUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-vanillaUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-freescale | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-5.19.0-29-genericUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-58-genericUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-1017-awsUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.19.0-32-genericUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1159-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1028-awsUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-gcpUpgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1101-azureUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-virtualUpgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-29-generic-lpae | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub