{
  "cveId": "CVE-2023-34319",
  "url": "https://patchblox.com/security/cve/CVE-2023-34319",
  "summary": "CVE-2023-34319 is fixed in 20 products on 1 platform, first by ALAS2023-2023-330, released August 31, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with a frontend splitting a packet in a way such t...",
  "description": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece.  Unfortunately the logic introduced there didn\u0027t account for the extreme case of the entire packet being split into as many pieces as permitted by the protocol, yet still being smaller than the area that\u0027s specially dealt with to keep all (possible) headers together.  Such an unusual packet would therefore trigger a buffer overrun in the driver.",
  "published": "2023-08-31T21:45:00Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00288,
  "epssPercentile": 0.2143,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.49-69.116",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.52-1",
      "fix": "DEBIAN-CVE-2023-34319",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34319",
      "released": "2023-09-22T14:15:45Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.4.11-1",
      "fix": "DEBIAN-CVE-2023-34319",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34319",
      "released": "2023-09-22T14:15:45Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.4.11-1",
      "fix": "DEBIAN-CVE-2023-34319",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-34319",
      "released": "2023-09-22T14:15:45Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.49-69.116.amzn2023",
      "fix": "ALAS2023-2023-330",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-330",
      "released": "2023-08-31T21:45:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}