| 2013-04-01 17:55:01 |
Keith Coleman |
bug |
|
|
added bug |
| 2013-04-01 17:55:51 |
Keith Coleman |
description |
Kernels that have applied Xen Security Advisory 39 (CVE-2013-0216, CVE-2013-0217) now disable Xen guest networking in undesirable situations. The case that many people encounter is where the guest has MAX_SKB_FRAGS larger than MAX_SKB_FRAGS on dom0. This also occurs with Windows HVM guests.
We should resolve this issue soon because most people using Ubuntu dom0 to host VMs will be affected after they apply the latest security updates.
Logs show something like the following:
xenbr1: port 8(vif51.0) entered forwarding state
vif vif-51-0 vif51.0: Too many frags
vif vif-51-0 vif51.0: fatal error; disabling device
xenbr1: port 8(vif51.0) entered disabled state
There is a tread on the Xen-devel mailing list discussing the issue: http://lists.xen.org/archives/html/xen-devel/2013-03/msg00404.html
It seems that setting MAX_SKB_FRAGS to 19 on the dom0 kernel will avoid this issue. |
Kernels that have applied Xen Security Advisory 39 (CVE-2013-0216, CVE-2013-0217) now disable Xen guest networking in undesirable situations. The case that many people encounter is where the guest has MAX_SKB_FRAGS larger than MAX_SKB_FRAGS on dom0. This also occurs with Windows HVM guests.
We should resolve this issue soon because most people using Ubuntu dom0 to host VMs will be affected after they apply the latest security updates.
Logs show something like the following:
xenbr1: port 8(vif51.0) entered forwarding state
vif vif-51-0 vif51.0: Too many frags
vif vif-51-0 vif51.0: fatal error; disabling device
xenbr1: port 8(vif51.0) entered disabled state
There is a thread on the Xen-devel mailing list discussing the issue: http://lists.xen.org/archives/html/xen-devel/2013-03/msg00404.html
It seems that setting MAX_SKB_FRAGS to 19 on the dom0 kernel will avoid this issue. |
|
| 2013-04-04 12:24:13 |
Marc Deslauriers |
information type |
Private Security |
Public Security |
|
| 2013-04-04 12:24:14 |
Marc Deslauriers |
bug |
|
|
added subscriber Ubuntu Bugs |
| 2013-04-04 12:30:33 |
Brad Figg |
linux (Ubuntu): status |
New |
Incomplete |
|
| 2013-04-04 16:14:02 |
Stefan Bader |
bug |
|
|
added subscriber Stefan Bader |
| 2013-05-08 08:37:10 |
Rowan Wookey |
linux (Ubuntu): status |
Incomplete |
Confirmed |
|
| 2013-05-08 08:37:23 |
Rowan Wookey |
bug |
|
|
added subscriber Rowan |
| 2013-05-27 14:20:57 |
Jon Schewe |
bug |
|
|
added subscriber Jon Schewe |
| 2013-06-14 08:02:45 |
Nathan O'Sullivan |
bug |
|
|
added subscriber Nathan O'Sullivan |
| 2013-06-14 17:09:02 |
Fleish |
bug |
|
|
added subscriber Fleish |
| 2013-06-14 17:18:41 |
Fleish |
bug watch added |
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701744 |
|
| 2013-08-27 11:53:07 |
Jan Kellermann |
bug |
|
|
added subscriber Jan Kellermann |
