CVE-2023-34319

Summary

CVE-2023-34319 is a newly discovered vulnerability in Linux's netback driver. The driver was previously patched for XSA-423, but the fix introduced logic to handle packets split by a frontend. This logic did not account for the extreme case where a packet is split into an unusually large number of pieces, smaller than the designated area, resulting in a buffer overrun in the driver.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.