CVE-2023-6270
CVSS v3.1
7 (High)
EPSS
0.04 % (10th)
Affected Products
2
Advisories
55
NVD Status
Modified
A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on struct net_device
, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq
global queue. This could lead to a denial of service condition or potential code execution.
- CVE Status
- PUBLISHED
- NVD Status
- Modified
- CNA
- Red Hat, Inc.
- Published Date
-
2024-01-04 17:15:08
(8 months ago) - Updated Date
-
2024-06-27 13:15:54
(2 months ago)
Affected Products
Loading...
Loading...
Configuration #1
|
Configuration #2
|
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...