CVE-2021-46911 ch_ktls: Fix kernel panic
A kernel panic in the ch_ktls module can cause a denial of service due to improper page reference counting during skb transmission.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-46911?
CVE-2021-46911 is a critical vulnerability in Linux kernel, published on 27 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ch_ktls: Fix kernel panic
Taking page refcount is not ideal and causes kernel panic sometimes. It's better to take tx_ctx lock for the complete skb transmit, to avoid page cleanup if ACK received in middle.
Which versions are affected by CVE-2021-46911?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2021-46911?
Apply the vendor's patch.
Is CVE-2021-46911 being exploited?
There is no known exploitation of CVE-2021-46911 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2021-46911, GHSA-v75j-9fr8-x3rq, UBUNTU-CVE-2021-46911.