CVE-2022-3643

07.12.2022, 01:15

Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.

Injection

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
XEN	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 27%

Vendor	Product	Version
linux	linux_kernel	3.19 ≤ 𝑥 < 4.9.336
linux	linux_kernel	4.10 ≤ 𝑥 < 4.14.302
linux	linux_kernel	4.15 ≤ 𝑥 < 4.19.269
linux	linux_kernel	4.20 ≤ 𝑥 < 5.4.227
linux	linux_kernel	5.5 ≤ 𝑥 < 5.10.159
linux	linux_kernel	5.11 ≤ 𝑥 < 5.15.83
linux	linux_kernel	5.16 ≤ 𝑥 < 6.0.13
debian	debian_linux	10.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-29.30 released
jammy	Fixed 5.15.0-58.64 released
focal	Fixed 5.4.0-137.154 released
bionic	Fixed 4.15.0-202.213 released
xenial	Fixed 4.4.0-236.270 released
trusty	not-affected

linux-allwinner

noble	dne
mantic	dne
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-allwinner-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1017.18 released
jammy	Fixed 5.15.0-1028.32 released
focal	Fixed 5.4.0-1094.102 released
bionic	Fixed 4.15.0-1148.160 released
xenial	Fixed 4.4.0-1153.168 released
trusty	Fixed 4.4.0-1115.121 released

linux-aws-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1028.32~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1094.102~18.04.1 released
xenial	dne
trusty	dne

linux-aws-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-hwe

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	Fixed 4.15.0-1148.160~16.04.1 released
trusty	dne

linux-azure

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1017.18 released
jammy	Fixed 5.15.0-1031.38 released
focal	Fixed 5.4.0-1101.107 released
bionic	ignored
xenial	Fixed 4.15.0-1159.174~16.04.1 released
trusty	Fixed 4.15.0-1159.174~14.04.1 released

linux-azure-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1159.174 released
xenial	dne
trusty	dne

linux-azure-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1031.38~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1101.107~18.04.1 released
xenial	dne
trusty	dne

linux-azure-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-edge

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-fde

kinetic	dne
jammy	Fixed 5.15.0-1031.38.1 released
focal	Fixed 5.4.0-1101.107 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1031.38~20.04.1.1 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-bluefield

kinetic	dne
jammy	dne
focal	Fixed 5.4.0-1058.64 released
bionic	dne
xenial	dne
trusty	dne

linux-dell300x

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1060.65 released
xenial	dne
trusty	dne

linux-fips

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	ignored
trusty	ignored

linux-gcp

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.16 released
jammy	Fixed 5.15.0-1027.34 released
focal	Fixed 5.4.0-1098.107 released
bionic	ignored
xenial	Fixed 4.15.0-1143.159~16.04.1 released
trusty	dne

linux-gcp-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1143.159 released
xenial	dne
trusty	dne

linux-gcp-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1027.34~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1098.107~18.04.1 released
xenial	dne
trusty	dne

linux-gcp-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gke

noble	not-affected
kinetic	dne
jammy	Fixed 5.15.0-1027.32 released
focal	Fixed 5.4.0-1094.101 released
bionic	dne
xenial	ignored
trusty	dne

linux-gke-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1027.32~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gke-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gkeop

kinetic	dne
jammy	Fixed 5.15.0-1013.17 released
focal	Fixed 5.4.0-1062.66 released
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1013.17~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-hwe

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	Fixed 4.15.0-202.213~16.04.1 released
trusty	dne

linux-hwe-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-58.64~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.19.0-32.33~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-137.154~18.04.1 released
xenial	dne
trusty	dne

linux-hwe-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-ibm

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.16 released
jammy	Fixed 5.15.0-1023.26 released
focal	Fixed 5.4.0-1042.47 released
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.15

noble	dne
mantic	dne
lunar	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1042.47~18.04.1 released
xenial	dne
trusty	dne

linux-intel

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-intel-iot-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg

kinetic	dne
jammy	Fixed 5.15.0-1023.28 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1023.28~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-iot

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.4.0-1011.13 released
bionic	dne
xenial	dne
trusty	dne

linux-kvm

noble	dne
mantic	dne
lunar	ignored
kinetic	Fixed 5.19.0-1016.17 released
jammy	Fixed 5.15.0-1026.31 released
focal	Fixed 5.4.0-1084.90 released
bionic	Fixed 4.15.0-1134.139 released
xenial	Fixed 4.4.0-1116.126 released
trusty	dne

linux-laptop

noble	dne
mantic	not-affected
lunar	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.16 released
jammy	Fixed 5.15.0-58.64 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-58.64~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	Fixed 4.4.0-236.270~14.04.1 released

linux-nvidia

noble	not-affected
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.15.0-1017.17 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.2

noble	dne
mantic	dne
lunar	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-lowlatency

noble	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-oem-5.10

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.14

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.17

noble	dne
mantic	dne
lunar	dne
kinetic	ignored
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.1

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.8

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.17 released
jammy	Fixed 5.15.0-1027.33 released
focal	Fixed 5.4.0-1092.101 released
bionic	Fixed 4.15.0-1113.124 released
xenial	Fixed 4.15.0-1113.124~16.04.1 released
trusty	dne

linux-oracle-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1027.33~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1092.101~18.04.1 released
xenial	dne
trusty	dne

linux-oracle-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1012.19 released
jammy	Fixed 5.15.0-1023.25 released
focal	Fixed 5.4.0-1079.90 released
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1079.90~18.04.1 released
xenial	dne
trusty	dne

linux-raspi-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi2

kinetic	dne
jammy	dne
focal	ignored
bionic	Fixed 4.15.0-1126.134 released
xenial	ignored
trusty	dne

linux-raspi2-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-realtime

noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1012.13 released
jammy	ignored
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1028.32~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1144.154 released
xenial	ignored
trusty	dne

linux-starfive

noble	dne
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-xilinx-zynqmp

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	Fixed 5.4.0-1021.25 released
bionic	dne
xenial	dne
trusty	dne

Common Weakness Enumeration

CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The software constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References

http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html

http://www.openwall.com/lists/oss-security/2022/12/07/2

https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html

https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html

https://xenbits.xenproject.org/xsa/advisory-423.txt

http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html

http://www.openwall.com/lists/oss-security/2022/12/07/2

https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html

https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html

https://xenbits.xenproject.org/xsa/advisory-423.txt