The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible) headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Mar 21, 2024 | Sep 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-tools-devel | Aug 24, 2023 | Aug 24, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 4, 2023 | Sep 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.49-69.116Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Aug 8, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 21, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Sep 23, 2024 | Sep 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 22, 2023 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-vanilla-develUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-develUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-vanillaUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-vanilla-baseUpgrade kernel-debug-baseUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade dtb-appleUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-alUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-zteUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-sprd | Aug 24, 2023 | Aug 23, 2023 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1118-azureUpgrade linux-image-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-nvidia-6.2Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1162-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-awsUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-virtualUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-bluefieldUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-6.2.0-1017-gcp | Sep 18, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub