CVE-2022-3643

Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.

• CWE-74

• http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
• http://www.openwall.com/lists/oss-security/2022/12/07/2Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-423.txtVendor Advisory
• http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
• http://www.openwall.com/lists/oss-security/2022/12/07/2Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-423.txtVendor Advisory

Published

Dec 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36424Cross-Site Request Forgery (CSRF) vulnerability in Nikola Lo…8.8
• CVE-2022-36425Broken Access Control vulnerability in Beaver Builder plugin…9.8
• CVE-2022-36426Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-36427Missing Access Control vulnerability in About Rentals. Inc. …9.8
• CVE-2022-36428Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in S…4.8
• CVE-2022-36429A command execution vulnerability exists in the ubus backend…7.2
• CVE-2022-36431An arbitrary file upload vulnerability in Rocket TRUfusion E…9.8
• CVE-2022-36432The Preview functionality in the Amasty Blog Pro 2.10.3 plug…5.4
• CVE-2022-36433The blog-post creation functionality in the Amasty Blog Pro …6.1
• CVE-2022-36436OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected b…9.8
• CVE-2022-36437The Connection handler in Hazelcast and Hazelcast Jet allows…9.1
• CVE-2022-36438AsusSwitch.exe on ASUS personal computers (running Windows) …7.8