CVE-2026-98967
Description
In the Linux kernel, the following vulnerability has been resolved: cxgb4/ch_ktls: disable softirqs around tid_list erases chcr_ktls_cpl_act_open_rpl() inserts into tid_list from the receive path using xa_insert_bh(). The array is shared by the adapter's connections and initialized with XA_FLAGS_LOCK_BH. However, chcr_ktls_dev_del() and the chcr_ktls_dev_add() error path use xa_erase(), which takes the XArray lock without disabling softirqs. When cleanup runs with softirqs enabled, a receive softirq for another connection on the same CPU can interrupt the erase and spin on the lock held by the interrupted task. Use xa_erase_bh() at both sites to match the insertion path.
How to fix
- Linux Linux2c49ea1dd16d6dc0dd895e6aec57c9a448191cfe, bafe51bb145e6ae549ae79dcbc35648292625934, 0c5063a898813a420e6bad93debd134ef8b3bfd1, 8739f06e3f82cd715f7dd10ab24029ed881efc90, bcf97573d44e277b1744d7f1226f665aa0ccc599, 7110c7f70c59eb7924e79853bcc00e2a026662e6, bea736a2b8c6da5b1078badf1206541b5404250f, 4c9dc0faca98084922caeb689579d338cf3e1c29, 5.10.273, 5.13 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | b96adbf6601d76ee0bdd9bfa5bcdd0cdd5333d78 ≤ v < 2c49ea1dd16d6dc0dd895e6aec57c9a448191cfe, 65e302a9bd57b62872040d57eea1201562a7cbb2 ≤ v < bafe51bb145e6ae549ae79dcbc35648292625934, 65e302a9bd57b62872040d57eea1201562a7cbb2 ≤ v < 0c5063a898813a420e6bad93debd134ef8b3bfd1, 65e302a9bd57b62872040d57eea1201562a7cbb2 ≤ v < 8739f06e3f82cd715f7dd10ab24029ed881efc90, 65e302a9bd57b62872040d57eea1201562a7cbb2 ≤ v < bcf97573d44e277b1744d7f1226f665aa0ccc599, 65e302a9bd57b62872040d57eea1201562a7cbb2 ≤ v < 7110c7f70c59eb7924e79853bcc00e2a026662e6, 65e302a9bd57b62872040d57eea1201562a7cbb2 ≤ v < bea736a2b8c6da5b1078badf1206541b5404250f, 65e302a9bd57b62872040d57eea1201562a7cbb2 ≤ v < 4c9dc0faca98084922caeb689579d338cf3e1c29, 70c4ead897211b184f36cbeda213f2a3e8153218, 5.10.42 ≤ v < 5.10.273, 5.12.9 ≤ v < 5.13, 5.13 | 2c49ea1dd16d6dc0dd895e6aec57c9a448191cfe, bafe51bb145e6ae549ae79dcbc35648292625934, 0c5063a898813a420e6bad93debd134ef8b3bfd1, 8739f06e3f82cd715f7dd10ab24029ed881efc90, bcf97573d44e277b1744d7f1226f665aa0ccc599, 7110c7f70c59eb7924e79853bcc00e2a026662e6, bea736a2b8c6da5b1078badf1206541b5404250f, 4c9dc0faca98084922caeb689579d338cf3e1c29, 5.10.273, 5.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.