CVE-2026-98967: cxgb4/ch_ktls: disable softirqs around tid_list erases

In the Linux kernel, the following vulnerability has been resolved:

cxgb4/chktls: disable softirqs around tidlist erases

chcrktlscplactopenrpl() inserts into tidlist from the receive path using xainsertbh(). The array is shared by the adapter's connections and initialized with XAFLAGSLOCKBH. However, chcrktlsdevdel() and the chcrktlsdevadd() error path use xaerase(), which takes the XArray lock without disabling softirqs.

When cleanup runs with softirqs enabled, a receive softirq for another connection on the same CPU can interrupt the erase and spin on the lock held by the interrupted task. Use xaerasebh() at both sites to match the insertion path.