CVE - CVE-2024-53138

CVE-ID
CVE-2024-53138	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_page() and page_ref_inc() APIs to increment the page reference. But on the release path (mlx5e_ktls_tx_handle_resync_dump_comp()), only put_page() is used. This is an issue when using pages from large folios: the get_page() references are stored on the folio page while the page_ref_inc() references are stored directly in the given page. On release the folio page will be dereferenced too many times. This was found while doing kTLS testing with sendfile() + ZC when the served file was read from NFS on a kernel with NFS large folios support (commit 49b29a573da8 ("nfs: add support for large folios")).
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2723e8b2cbd486cb96e5a61b22473f7fd62e18df URL:https://git.kernel.org/stable/c/2723e8b2cbd486cb96e5a61b22473f7fd62e18df MISC:https://git.kernel.org/stable/c/69fbd07f17b0fdaf8970bc705f5bf115c297839d URL:https://git.kernel.org/stable/c/69fbd07f17b0fdaf8970bc705f5bf115c297839d MISC:https://git.kernel.org/stable/c/93a14620b97c911489a5b008782f3d9b0c4aeff4 URL:https://git.kernel.org/stable/c/93a14620b97c911489a5b008782f3d9b0c4aeff4 MISC:https://git.kernel.org/stable/c/a0ddb20a748b122ea86003485f7992fa5e84cc95 URL:https://git.kernel.org/stable/c/a0ddb20a748b122ea86003485f7992fa5e84cc95 MISC:https://git.kernel.org/stable/c/c7b97f9e794d8e2bbaa50e1d6c230196fd214b5e URL:https://git.kernel.org/stable/c/c7b97f9e794d8e2bbaa50e1d6c230196fd214b5e MISC:https://git.kernel.org/stable/c/dd6e972cc5890d91d6749bb48e3912721c4e4b25 URL:https://git.kernel.org/stable/c/dd6e972cc5890d91d6749bb48e3912721c4e4b25 MISC:https://git.kernel.org/stable/c/ffad2ac8c859c1c1a981fe9c4f7ff925db684a43 URL:https://git.kernel.org/stable/c/ffad2ac8c859c1c1a981fe9c4f7ff925db684a43
Assigning CNA
kernel.org
Date Record Created
20241119	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241119)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)