CVE-2021-46911
published 2024-02-27CVE-2021-46911: In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel panic…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.59%
45.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
ch_ktls: Fix kernel panic
Taking page refcount is not ideal and causes kernel panic
sometimes. It's better to take tx_ctx lock for the complete
skb transmit, to avoid page cleanup if ACK received in middle.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.38-1 (bookworm) | linux 5.10.38-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 5a4b9fe7fece62ecab6fb28fe92362f83b41c33e < 8d5a9dbd2116a852f8f0f91f6fbc42a0afe1091f | 8d5a9dbd2116a852f8f0f91f6fbc42a0afe1091f |
| linux | linux | >= 5a4b9fe7fece62ecab6fb28fe92362f83b41c33e < 8348665d4181c68b0ca1205b48e1753d78bc810f | 8348665d4181c68b0ca1205b48e1753d78bc810f |
| linux | linux | >= 5a4b9fe7fece62ecab6fb28fe92362f83b41c33e < 1a73e427b824133940c2dd95ebe26b6dce1cbf10 | 1a73e427b824133940c2dd95ebe26b6dce1cbf10 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 0 < 5.10.38-1 | 5.10.38-1 |
| linux | linux_kernel | >= 5.11.0 < 5.11.16 | 5.11.16 |
| linux | linux_kernel | >= 5.7.0 < 5.10.32 | 5.10.32 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: denial of service in ch_ktls
vendor_redhat·2024-02-27·CVSS 5.5
CVE-2021-46911 [MEDIUM] CWE-20 kernel: denial of service in ch_ktls
kernel: denial of service in ch_ktls
In the Linux kernel, the following vulnerability has been resolved:
ch_ktls: Fix kernel panic
Taking page refcount is not ideal and causes kernel panic
sometimes. It's better to take tx_ctx lock for the complete
skb transmit, to avoid page cleanup if ACK received in middle.
A flaw was found in ch_ktls in the Linux Kernel. This issue occurs due to a missing synchronization lock, which may cause a denial of service while doing page cleanup.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Packag
Debian
CVE-2021-46911: linux - In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fi...
vendor_debian·2021·CVSS 5.5
CVE-2021-46911 [MEDIUM] CVE-2021-46911: linux - In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fi...
In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel panic sometimes. It's better to take tx_ctx lock for the complete skb transmit, to avoid page cleanup if ACK received in middle.
Scope: local
bookworm: resolved (fixed in 5.10.38-1)
bullseye: resolved (fixed in 5.10.38-1)
forky: resolved (fixed in 5.10.38-1)
sid: resolved (fixed in 5.10.38-1)
trixie: resolved (fixed in 5.10.38-1)
GHSA
GHSA-v75j-9fr8-x3rq: In the Linux kernel, the following vulnerability has been resolved:
ch_ktls: Fix kernel panic
Taking page refcount is not ideal and causes kernel pa
ghsa_unreviewed·2024-02-27
CVE-2021-46911 [MEDIUM] GHSA-v75j-9fr8-x3rq: In the Linux kernel, the following vulnerability has been resolved:
ch_ktls: Fix kernel panic
Taking page refcount is not ideal and causes kernel pa
In the Linux kernel, the following vulnerability has been resolved:
ch_ktls: Fix kernel panic
Taking page refcount is not ideal and causes kernel panic
sometimes. It's better to take tx_ctx lock for the complete
skb transmit, to avoid page cleanup if ACK received in middle.
OSV
CVE-2021-46911: In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel pani
osv·2024-02-27·CVSS 5.5
CVE-2021-46911 [MEDIUM] CVE-2021-46911: In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel pani
In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel panic sometimes. It's better to take tx_ctx lock for the complete skb transmit, to avoid page cleanup if ACK received in middle.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1a73e427b824133940c2dd95ebe26b6dce1cbf10https://git.kernel.org/stable/c/8348665d4181c68b0ca1205b48e1753d78bc810fhttps://git.kernel.org/stable/c/8d5a9dbd2116a852f8f0f91f6fbc42a0afe1091fhttps://git.kernel.org/stable/c/1a73e427b824133940c2dd95ebe26b6dce1cbf10https://git.kernel.org/stable/c/8348665d4181c68b0ca1205b48e1753d78bc810fhttps://git.kernel.org/stable/c/8d5a9dbd2116a852f8f0f91f6fbc42a0afe1091f
2024-02-27
Published