CVE-2024-53138

一、漏洞信息
漏洞编号：CVE-2024-53138
漏洞组件：linux
CVSS评分：暂无
漏洞简述：
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_page() and page_ref_inc() APIs to increment the page reference. But on the release path (mlx5e_ktls_tx_handle_resync_dump_comp()), only put_page() is used. This is an issue when using pages from large folios: the get_page() references are stored on the folio page while the page_ref_inc() references are stored directly in the given page. On release the folio page will be dereferenced too many times. This was found while doing kTLS testing with sendfile() + ZC when the served file was read from NFS on a kernel with NFS large folios support (commit 49b29a573da8 ("nfs: add support for large folios")).
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-53138
漏洞数据来源:
查询CVE官网收集
二、修复参考
漏洞补丁信息：
https://git.kernel.org/stable/c/d17c631ba04e960eb6f8728b10d585de20ac4f71 
https://git.kernel.org/stable/c/830c03e58beb70b99349760f822e505ecb4eeb7e 
https://git.kernel.org/stable/c/ad7adfb95f64a761e4784381e47bee1a362eb30d 
https://git.kernel.org/stable/c/5291ff856d2c5177b4fe9c18828312be30213193 
https://git.kernel.org/stable/c/b25e11f978b63cb7857890edb3a698599cddb10e 
https://www.zerodayinitiative.com/advisories/ZDI-24-1229/ 
三、 影响性参考
是否受影响：是
分析说明：CVE官网给出的不受影响列表中，kernel_6.6.55及以后的kernel_6.6.*版本不受影响，此仓库的kernel为6.6.48,且对应的代码文件5352行存在漏洞代码，推测受影响。

openKylin（孵化期） / linux

内容风险标识

评论 (2)

openKylin（孵化期） / linux .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-53138

评论 (2)

搜索帮助

openKylin（孵化期） / linux