Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade perfUpgrade kernel-tools-devel | Jan 24, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 23, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-tools-devel | Feb 17, 2025 | Nov 22, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-alUpgrade kernel-zfcpdump-manUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade dtb-zteUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-vanilla-baseUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-rtUpgrade kernel-vanilla-develUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdump | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-4.4.0-236-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1159-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1126-raspi2Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1028-awsUpgrade linux-image-4.15.0-1148-aws-hweUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1094-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1027-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1092-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-58-generic-lpaeUpgrade linux-image-5.19.0-1012-raspiUpgrade linux-image-5.19.0-29-generic-lpaeUpgrade linux-image-5.19.0-1015-gcpUpgrade linux-image-5.19.0-29-generic-64kUpgrade linux-image-4.4.0-1116-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1023-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1113-oracleUpgrade linux-image-4.15.0-1143-gcpUpgrade linux-image-4.15.0-1134-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.19.0-32-genericUpgrade linux-image-5.4.0-1101-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1042-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-58-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1058-bluefieldUpgrade linux-image-5.15.0-58-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1023-intel-iotgUpgrade linux-image-5.4.0-137-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-dell300xUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1084-kvmUpgrade linux-image-5.4.0-1079-raspiUpgrade linux-image-4.15.0-1060-dell300xUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-236-lowlatencyUpgrade linux-image-5.19.0-1012-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-5.19.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1148-awsUpgrade linux-image-5.19.0-1015-lowlatencyUpgrade linux-image-5.19.0-1017-azureUpgrade linux-image-5.19.0-1015-ibmUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1023-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1023-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-58-genericUpgrade linux-image-5.19.0-32-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-137-generic-lpaeUpgrade linux-image-4.15.0-1144-snapdragonUpgrade linux-image-5.19.0-1017-awsUpgrade linux-image-5.19.0-32-generic-lpaeUpgrade linux-image-4.15.0-202-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-29-genericUpgrade linux-image-5.15.0-58-lowlatencyUpgrade linux-image-5.4.0-1098-gcpUpgrade linux-image-5.19.0-1016-kvmUpgrade linux-image-5.4.0-1094-gkeUpgrade linux-image-5.15.0-1031-azure-fdeUpgrade linux-image-5.15.0-1027-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1062-gkeopUpgrade linux-image-5.15.0-1013-gkeopUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1015-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-4.4.0-1153-awsUpgrade linux-image-5.15.0-1031-azureUpgrade linux-image-4.15.0-202-lowlatencyUpgrade linux-image-5.15.0-1026-kvmUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1115-awsUpgrade linux-image-5.4.0-137-lowlatencyUpgrade linux-image-4.15.0-202-genericUpgrade linux-image-snapdragonUpgrade linux-image-kvm | Jan 7, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub