Answer in brief
CVE-2024-26898 records a Unknown severity vulnerability in aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic), linux/linux_kernel (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic), linux/linux_kernel (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7562f876cd93800f2f8c89445f2a563590b24e09 <ad80c34944d7175fa1f5c7a55066020002921a99 || >=7562f876cd93800f2f8c89445f2a563590b24e09 <1a54aa506b3b2f31496731039e49778f54eee881 || >=7562f876cd93800f2f8c89445f2a563590b24e09 <faf0b4c5e00bb680e8e43ac936df24d3f48c8e65 || >=7562f876cd93800f2f8c89445f2a563590b24e09 <7dd09fa80b0765ce68bfae92f4e2f395ccf0fba4 || >=7562f876cd93800f2f8c89445f2a563590b24e09 <74ca3ef68d2f449bc848c0a814cefc487bf755fa || >=7562f876cd93800f2f8c89445f2a563590b24e09 <eb48680b0255a9e8a9bdc93d6a55b11c31262e62 || >=7562f876cd93800f2f8c89445f2a563590b24e09 <079cba4f4e307c69878226fdf5228c20aa1c969c || >=7562f876cd93800f2f8c89445f2a563590b24e09 <a16fbb80064634b254520a46395e36b87ca4731e || >=7562f876cd93800f2f8c89445f2a563590b24e09 <f98364e926626c678fb4b9004b75cacf92ff0662 | ad80c34944d7175fa1f5c7a55066020002921a99, 1a54aa506b3b2f31496731039e49778f54eee881, faf0b4c5e00bb680e8e43ac936df24d3f48c8e65, 7dd09fa80b0765ce68bfae92f4e2f395ccf0fba4, 74ca3ef68d2f449bc848c0a814cefc487bf755fa, eb48680b0255a9e8a9bdc93d6a55b11c31262e62, 079cba4f4e307c69878226fdf5228c20aa1c969c, a16fbb80064634b254520a46395e36b87ca4731e, f98364e926626c678fb4b9004b75cacf92ff0662 |
| Linux/Linuxgeneric | 2.6.22 | Not reported |
| linux/linux_kernelgeneric | 2.6.22 | Not reported |
| linux/linux_kernelgeneric | >=7562f876cd93 <ad80c34944d7 || >=7562f876cd93 <1a54aa506b3b || >=7562f876cd93 <faf0b4c5e00b || >=7562f876cd93 <7dd09fa80b07 || >=7562f876cd93 <74ca3ef68d2f || >=7562f876cd93 <eb48680b0255 || >=7562f876cd93 <079cba4f4e30 || >=7562f876cd93 <a16fbb800646 || >=7562f876cd93 <f98364e92662 | ad80c34944d7, 1a54aa506b3b, faf0b4c5e00b, 7dd09fa80b07, 74ca3ef68d2f, eb48680b0255, 079cba4f4e30, a16fbb800646, f98364e92662 |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.0 <V3.1.5 | V3.1.5 |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.0 <V3.1.5 | V3.1.5 |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.0 <V3.1.5 | V3.1.5 |
Published upstream
Apr 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution. In aoecmd_cfg_pkts(), it always calls dev_put(ifp) when skb initial code is finished. But the net_device ifp will still be used in later tx()->dev_queue_xmit() in kthread. Which means that the dev_put(ifp) should NOT be called in the success path of skb initial code in aoecmd_cfg_pkts(). Otherwise tx() may run into use-after-free because the net_device is freed. This patch removed the dev_put(ifp) in the success path in aoecmd_cfg_pkts(), and added dev_put() after skb xmit in tx().
Quoted source text, attributed separately from HOL analysis.