Linux kernel code execution vulnerability (CNVD-2024-14767)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. The vulnerability is due to the aoecmd_cfg_pkts() function in the Linux kernel’s ATA over Ethernet (AoE) driver incorrectly updating the refcnt on struct net_device and can be triggered by a contention between idle on the structure and access via the skbtxq global queue to trigger post-release usage. An attacker could exploit this vulnerability to cause a denial of service condition or potentially code execution.