CVE-2021-46911
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
In the Linux kernel, the ch_ktls module has an issue causing kernel panic. Taking page refcount is not ideal and can lead to panic; it's better to take tx_ctx lock for the complete skb transmit to avoid page cleanup during transmission.
Risk Assessment
The vulnerability can cause kernel panic, leading to system unavailability. It could be exploited locally to disrupt services.
Recommendation
Update the Linux kernel to a version with the fix for CVE-2021-46911. Also check for vendor-provided patches.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ch_ktls: Fix kernel panic Taking page refcount is not ideal and causes kernel panic sometimes. It's better to take tx_ctx lock for the complete skb transmit, to avoid page cleanup if ACK received in middle.