CVE-2023-6270: Linux Kernel AoE Driver Use-After-Free Local Privilege Escalation Vulnerability
A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmdcfgpkts() function improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue. This could lead to a denial of service condition or potential code execution.
Other sources
A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmdcfgpkts() improperly updates the refcnt on struct netdevice, and a use-after-free can be triggered by racing between the free on the struct and the access through the skbtxq global queue.
ZDI security advisory (possibly yet to be published): https://www.zerodayinitiative.com/advisories/ZDI-CAN-22236/
— Red Hat
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AoE driver. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
— ZDI
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6270?
CVE-2023-6270 is classified with a moderate severity due to the potential for a use-after-free vulnerability.
How do I fix CVE-2023-6270?
To remediate CVE-2023-6270, update your Linux kernel to the patched versions such as 5.10.223-1, 6.1.123-1, or newer versions.
Which systems are affected by CVE-2023-6270?
CVE-2023-6270 affects the Linux kernel and distributions like Fedora 39.
What type of vulnerability is CVE-2023-6270?
CVE-2023-6270 is a use-after-free vulnerability in the ATA over Ethernet driver of the Linux kernel.
How can CVE-2023-6270 impact my system?
Exploiting CVE-2023-6270 could allow an attacker to execute arbitrary code, leading to system compromise.