Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.162-141.675Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-rtUpgrade dtb-alUpgrade kernel-vanillaUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade dtb-zteUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-vanilla-devel | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-58-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-azureUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1028-awsUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.19.0-32-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-137-genericUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1094-awsUpgrade linux-image-4.4.0-1116-kvm | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub