Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-4.14.304-226.531Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.162-141.675Upgrade perfUpgrade kernel-debuginfo | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-vanilla-livepatch-develUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade kernel-vanilla-develUpgrade kernel-preemptUpgrade dtb-qcomUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade dtb-alUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-vanillaUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-zteUpgrade dtb-amazonUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-vanilla-baseUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-debug-baseUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azure | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-azureUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-oemUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-virtualUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1094-awsUpgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-dell300xUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.19.0-32-genericUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-bluefield | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub