| The vulnerability, identified as CVE-2021-46911, is a kernel panic issue in the Linux kernel's ch_ktls (Chelsio inline crypto TLS) driver. The problem arises from taking page refcounts, which can cause kernel panics under certain circumstances. Instead, the fix involves taking the tx_ctx lock for the entire skb transmit operation to prevent page cleanup if an ACK is received mid-transmission. |
| |
| The issue was introduced in Linux kernel version 5.7 with commit 5a4b9fe7fece and has been fixed in versions 5.10.32 (commit 8d5a9dbd2116), 5.11.16 (commit 8348665d4181), and 5.12 (commit 1a73e427b824). The affected file is `drivers/net/ethernet/chelsio/inline_crypto/ch_ktls/chcr_ktls.c`. |
| |
| The recommended mitigation is to update to the latest stable kernel version, which includes this fix as well as many other bugfixes. Cherry-picking individual commits is not supported by the Linux kernel community. However, if updating to the latest release is impossible, the individual changes can be found at the specified commit links. |
| |
