Threats tagged 'ghsa-r8vm-2j4g-7jq3'

CVE-2024-53138 is a vulnerability in the Linux kernel's net/mlx5e kTLS transmit handling code involving incorrect page reference counting. The issue arises from inconsistent use of get_page() and page_ref_inc() APIs to increment page references, but only put_page() is used on the release path. This leads to excessive dereferencing of folio pages when large folios are involved, potentially causing kernel instability or crashes. The flaw was discovered during kTLS testing with sendfile() and zero-copy on NFS with large folio support.