---
id: CVE-2023-34319
title: |-
  The fix for XSA-423 added logic to Linux'es netback driver to deal with
  a frontend splitting a packet in a way such that not all of the headers
  would come in one piece
summary: |-
  The fix for XSA-423 added logic to Linux'es netback driver to deal with
  a frontend splitting a packet in a way such that not all of the headers
  would come in one piece.  Unfortunately the logic introduced there
  didn't account for the ext…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-787
  - CWE-787
vendor: xen
product: xen
affected:
  - xen >= 3.2.0
  - debian_linux = 10.0
  - 'linux_kernel >= 4.9.336, < 4.10'
  - 'linux_kernel >= 4.14.302, < 4.14.321'
  - 'linux_kernel >= 4.19.269, < 4.19.290'
  - 'linux_kernel >= 5.4.227, < 5.4.252'
  - 'linux_kernel >= 5.10.159, < 5.10.189'
  - 'linux_kernel >= 5.15.83, < 5.15.125'
  - 'linux_kernel >= 6.1.13, < 6.1.44'
  - 'linux_kernel >= 6.2, < 6.4.9'
patched:
  - linux_kernel 6.4.9
published: '2023-09-22'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T00:16:32.977'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-34319'
references:
  - url: >-
      http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
    label: security@xen.org
  - url: 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'
    label: security@xen.org
  - url: 'https://security.netapp.com/advisory/ntap-20240202-0001/'
    label: security@xen.org
  - url: 'https://xenbits.xenproject.org/xsa/advisory-432.html'
    label: security@xen.org
  - url: >-
      http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://xenbits.xen.org/xsa/advisory-432.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20240202-0001/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://xenbits.xenproject.org/xsa/advisory-432.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.00291
epssPercentile: 0.20159
ingestedAt: '2026-10-15T01:08:04.207Z'
---

## Overview

The fix for XSA-423 added logic to Linux'es netback driver to deal with
a frontend splitting a packet in a way such that not all of the headers
would come in one piece.  Unfortunately the logic introduced there
didn't account for the extreme case of the entire packet being split
into as many pieces as permitted by the protocol, yet still being
smaller than the area that's specially dealt with to keep all (possible)
headers together.  Such an unusual packet would therefore trigger a
buffer overrun in the driver.

## Affected

- `xen >= 3.2.0`
- `debian_linux = 10.0`
- `linux_kernel >= 4.9.336, < 4.10`
- `linux_kernel >= 4.14.302, < 4.14.321`
- `linux_kernel >= 4.19.269, < 4.19.290`
- `linux_kernel >= 5.4.227, < 5.4.252`
- `linux_kernel >= 5.10.159, < 5.10.189`
- `linux_kernel >= 5.15.83, < 5.15.125`
- `linux_kernel >= 6.1.13, < 6.1.44`
- `linux_kernel >= 6.2, < 6.4.9`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.4.9`