In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: kTLS, Fix incorrect page refcounting
The kTLS tx handling code is using a mix of get_page() and page_ref_inc() APIs to increment the page reference. But on the release path (mlx5e_ktls_tx_handle_resync_dump_comp()), only put_page() is used.
This is an issue when using pages from large folios: the get_page() references are stored on the folio page while the page_ref_inc() references are stored directly in the given page. On release the folio page will be dereferenced too many times.
This was found while doing kTLS testing with sendfile() + ZC when the served file was read from NFS on a kernel with NFS large folios support (commit 49b29a573da8 ("nfs: add support for large folios")).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.176-118.170 | Mar 14, 2025 | Dec 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Mar 27, 2025 | Dec 4, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 9, 2024 | Dec 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 4, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-awsUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-136-generic-64k | Feb 20, 2025 | Dec 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Dec 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub