The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 21, 2024 | Sep 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-4.14.322-244.536Upgrade bpftoolUpgrade kernel-livepatch-5.10.192-182.736 | Aug 24, 2023 | Aug 24, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 4, 2023 | Sep 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-devel | Feb 17, 2025 | Aug 8, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 21, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Sep 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Sep 22, 2023 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-vanilla-baseUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-azure-baseUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-vanillaUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-preemptUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-default-manUpgrade kernel-zfcpdump-manUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-zteUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-alUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-livepatch-devel | Aug 24, 2023 | Aug 23, 2023 |
| Ubuntu | — | Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-246-genericUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-kvmUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-awsUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1050-azureUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-intelUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-nvidia-6.2Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-5.15.0-87-generic-lpae | Sep 18, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub