Vulnerability feed

Executive summary

The advisory describes a fix in the Linux kernel's Chelsio cxgb4 ch_ktls driver, which handles inline TLS offload. It addresses a locking issue that could cause a system to hang when connection cleanup races with network receive processing. The advisory does not state a severity rating, and the fix is a code change that the kernel stable tree has merged.

Technical summary

The flaw is a locking problem in the chcr_ktls_dev_del() and chcr_ktls_dev_add() error paths, which called xa_erase() without disabling softirqs while the tid_list XArray is also modified from the receive softirq path. A receive softirq for another connection on the same CPU could interrupt the erase and spin on a lock held by the interrupted task. The fix replaces xa_erase() with xa_erase_bh() at both sites. The advisory does not state affected or fixed version numbers, attack vector or privileges needed, a CVSS score, workarounds, or detection guidance. The advisory names the Fixes commit 65e302a9bd57 and a commit ID of 4c9dc0faca98084922caeb689579d338cf3e1c29.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/4c9dc0faca98084…eb689579d338cf3e1c29

Score

No CVSS score published.

Affects

LinuxChelsioLinuxLinux kernelChelsio cxgb4