The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 21, 2024 | Sep 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.192-182.736 | Aug 24, 2023 | Aug 24, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 4, 2023 | Sep 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-devel | Feb 17, 2025 | Aug 8, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 21, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Sep 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 22, 2023 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-rtUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade dtb-alUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-kvmsmall-baseUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-manUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-vanilla-livepatch-develUpgrade dtb-zteUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-debug-baseUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-azure-baseUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dtb-amdUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-baseUpgrade kernel-64kb-optionalUpgrade kernel-vanillaUpgrade kernel-vanilla-develUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-devel | Aug 24, 2023 | Aug 23, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1112-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-165-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1050-azureUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-oemUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-oem-osp1Upgrade linux-image-raspiUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-azure-fde-lts-22.04 | Sep 18, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub