CVE-2023-6270

HIGH

MEDIUM Priority: 0.03 BB Relevance: 29/100

Published: 2024-01-04 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local

AC: High

PR: Low

UI: None

S: Unchanged

C: High

I: High

A: High

Description

A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.