CVE-2026-23054
Description
In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndis_filter_device_add() does not allocate an indirection table, accepting RSS hash key updates in this state leads to a hang. Fix this by gating netvsc_set_rxfh() on ndc->rx_table_sz and return -EOPNOTSUPP when the table is absent. This aligns set_rxfh with the device capabilities and prevents incorrect behavior.
How to fix
- Linux Linux8288136f508e78eb3563e7073975999cf225a2f9, 82c9039c8ebb715753a40434df714f865a3aec9c, 4cd55c609e85ae2313248ef1a33619a3eef44a16, 11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3, d23564955811da493f34412d7de60fa268c8cb50 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 ≤ v < 8288136f508e78eb3563e7073975999cf225a2f9, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 ≤ v < 82c9039c8ebb715753a40434df714f865a3aec9c, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 ≤ v < 4cd55c609e85ae2313248ef1a33619a3eef44a16, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 ≤ v < 11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3, 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 ≤ v < d23564955811da493f34412d7de60fa268c8cb50, 4.11 | 8288136f508e78eb3563e7073975999cf225a2f9, 82c9039c8ebb715753a40434df714f865a3aec9c, 4cd55c609e85ae2313248ef1a33619a3eef44a16, 11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3, d23564955811da493f34412d7de60fa268c8cb50 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.