Google: sys-kernel/lakitu-kernel-6_1: security update to 17872.0.0

high Tenable Cloud Security Plugin ID 450544

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a
way such that not all of the headers would come in one piece. Unfortunately the logic introduced there
didn't account for the extreme case of the entire packet being split into as many pieces as permitted by
the protocol, yet still being smaller than the area that's specially dealt with to keep all (possible)
headers together. Such an unusual packet would therefore trigger a buffer overrun in the driver.
(CVE-2023-34319)

Solution

Update the sys-kernel/lakitu-kernel-6_1 library and its related packages to version 17872.0.0 or later.

Plugin Details

Severity: High

ID: 450544

Version: Revision 1.1

Type: Local

Family: Google COS Security Checks

Published: 10/1/2026

Updated: 10/1/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.15

Vendor

Vendor Severity: HIGH

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2023-34319

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/21/2021

Reference Information

CVE: CVE-2023-34319

Detections

Analytics