A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 7 | High | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Product | Vendor | Version |
|---|---|---|
| Red Hat Enterprise Linux 6 | Red Hat | 5.2.2.1 |
| Red Hat Enterprise Linux 9 | Red Hat | 5.3 |
| Red Hat Enterprise Linux 6 | Red Hat | 13.0.5.0 |
| Red Hat Enterprise Linux 7 | Red Hat | 13.0.5.1 |
| Red Hat Enterprise Linux 9 | Red Hat | 13.0.5.2 |
| Red Hat Enterprise Linux 9 | Red Hat | < 16.0.1115.1 |
| Red Hat Enterprise Linux 7 | Red Hat | 6.0.0.beta3 |
| Red Hat Enterprise Linux 8 | Red Hat | <= 1.3.1 |
| Red Hat Enterprise Linux 7 | Red Hat | <= 0.9.83 |
| Red Hat Enterprise Linux 8 | Red Hat | < * |