Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.304-226.531Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-tools | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-vanilla-develUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-vanilla-baseUpgrade dtb-alteraUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-zteUpgrade kernel-preemptUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-vanillaUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade gfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-alUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-vanilla-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-default | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-236-genericUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-dell300xUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-gke-5.4Upgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1017-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1028-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-32-genericUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-58-genericUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.15.0-1031-azure-fde | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub