In the Linux kernel, the following vulnerability has been resolved:
aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
This patch is against CVE-2023-6270. The description of cve is:
A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.
In aoecmd_cfg_pkts(), it always calls dev_put(ifp) when skb initial code is finished. But the net_device ifp will still be used in later tx()->dev_queue_xmit() in kthread. Which means that the dev_put(ifp) should NOT be called in the success path of skb initial code in aoecmd_cfg_pkts(). Otherwise tx() may run into use-after-free because the net_device is freed.
This patch removed the dev_put(ifp) in the success path in aoecmd_cfg_pkts(), and added dev_put() after skb xmit in tx().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.153-100.162Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.343-259.562 | May 28, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-tools-develUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade python3-perfUpgrade perf-debuginfo | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 3, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-xen-develUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-trace-baseUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-trace-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-ec2-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-xenUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-ec2-develUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-default-manUpgrade ocfs2-kmp-rtUpgrade kernel-traceUpgrade kernel-source | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-4.15.0-1153-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-4.4.0-256-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-azureUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-4.15.0-226-genericUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1171-awsUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1134-kvmUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-4.15.0-1178-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-4.4.0-256-genericUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1169-awsUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-4.15.0-1163-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-4.15.0-226-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-4.15.0-1132-oracleUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-4.4.0-1133-awsUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub