CVE-2023-6270
A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.
Scoring
- Severity
- HIGH
- CVSS base score
- 7
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.02%
- CWE
- CWE-911, CWE-416
- Published
- 2024-01-04
- Last modified
- 2026-03-24
Weakness type
Related vulnerabilities
- CVE-2026-77587 — Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object...
- CVE-2026-49419 — Jail reference count underflow
- CVE-2026-19380 — Mullvad wireguard.sys IOCTL AdapterState reference count
- CVE-2024-45783 — Grub2: fs/hfs+: refcount can be decremented twice
- CVE-2024-46972 — GPU DDK - Security: Reference count overflow in pvr_sync_rollback_export_fence
- CVE-2024-43102 — umtx Kernel panic or Use-After-Free
- CVE-2023-5633 — Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
- CVE-2023-2019 — A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events....