The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 21, 2024 | Sep 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-5.15.128-80.144Upgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | Aug 24, 2023 | Aug 24, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 4, 2023 | Sep 22, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernelUpgrade perfUpgrade kernel-tools-devel | Feb 17, 2025 | Aug 8, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 21, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Sep 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 22, 2023 |
| Suse | — | Upgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdump-manUpgrade kernel-default-optionalUpgrade dtb-zteUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-alUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-manUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-symsUpgrade dtb-freescaleUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dtb-amdUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-preemptUpgrade kernel-vanilla-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-debug-baseUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade dtb-marvell | Aug 24, 2023 | Aug 23, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1014-awsUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-raspi2Upgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-246-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-nvidia-6.2Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04 | Sep 18, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub