CVE-2023-6270

Summary

CVE-2023-6270 is a vulnerability affecting the ATA over Ethernet (AoE) driver in the Linux kernel. The issue lies within the aoecmd_cfg_pkts() function, which mishandles the refcnt on `struct net_device`. A race condition occurs between freeing the struct and accessing it through the `skbtxq` global queue, resulting in a use-after-free scenario. This vulnerability can potentially lead to denial-of-service conditions or code execution, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.