In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: kTLS, Fix incorrect page refcounting
The kTLS tx handling code is using a mix of get_page() and page_ref_inc() APIs to increment the page reference. But on the release path (mlx5e_ktls_tx_handle_resync_dump_comp()), only put_page() is used.
This is an issue when using pages from large folios: the get_page() references are stored on the folio page while the page_ref_inc() references are stored directly in the given page. On release the folio page will be dereferenced too many times.
This was found while doing kTLS testing with sendfile() + ZC when the served file was read from NFS on a kernel with NFS large folios support (commit 49b29a573da8 ("nfs: add support for large folios")).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.233-223.887Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.176-118.170Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-devel | Mar 14, 2025 | Dec 4, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-common | Mar 27, 2025 | Dec 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 9, 2024 | Dec 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 4, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1147-azure-fips | Feb 20, 2025 | Dec 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Dec 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub