CVE-2022-3643

2022-12-0700:00:00

ubuntu.com

nic interface

linux network

packet protocol

cisco enic

broadcom netxtrem ii bcm5780

networking core

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS

Percentile

14.2%

JSON

Guests can trigger NIC interface reset/abort/crash via netback It is
possible for a guest to trigger a NIC interface reset/abort/crash in a
Linux based network backend by sending certain kinds of packets. It appears
to be an (unwritten?) assumption in the rest of the Linux network stack
that packet protocol headers are all contained within the linear section of
the SKB and some NICs behave badly if this is not the case. This has been
reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780
(bnx2x) though it may be an issue with other NICs/drivers as well. In case
the frontend is sending requests with split headers, netback will forward
those violating above mentioned assumption to the networking core,
resulting in said misbehavior.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-202.213UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-137.154UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-58.64UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-29.30UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-236.270UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1148.160UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1094.102UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1028.32UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1017.18UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1115.121UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-202.213	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-137.154	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-58.64	UNKNOWN
ubuntu	22.10	noarch	linux	< 5.19.0-29.30	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-236.270	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1148.160	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1094.102	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1028.32	UNKNOWN
ubuntu	22.10	noarch	linux-aws	< 5.19.0-1017.18	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1115.121	UNKNOWN