CVE-2023-6270

A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.

• CWE-416
• CWE-416

• https://access.redhat.com/security/cve/CVE-2023-6270Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2256786Issue Tracking, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2023-6270Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2256786Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/06/msg00020.htmlThird Party Advisory

Published

Jan 4, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6264Information leak in Content-Security-Policy header in Devolu…5.3
• CVE-2023-6265** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 a…8.1
• CVE-2023-6266The Backup Migration plugin for WordPress is vulnerable to u…7.5
• CVE-2023-6267A flaw was found in the json payload. If annotation based se…9.8
• CVE-2023-6268The JSON Content Importer WordPress plugin before 1.5.4 does…6.1
• CVE-2023-6269An argument injection vulnerability has been identified in t…9.8
• CVE-2023-6271The Backup Migration WordPress plugin before 1.3.6 stores in…7.5
• CVE-2023-6272The Theme My Login 2FA WordPress plugin before 1.2 does not …9.8
• CVE-2023-6273Permission management vulnerability in the module for disabl…5.3
• CVE-2023-6274A vulnerability was found in Byzoro Smart S80 up to 20231108…9.8
• CVE-2023-6275A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.…6.1
• CVE-2023-6276A vulnerability classified as critical has been found in Ton…7.5