CVE-2026-23054

NONE EPSS 6.5%
Published Feb 4, 20264mo ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 4, 2026 4mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndis_filter_device_add() does not allocate an indirection table, accepting RSS hash key updates in this state leads to a hang. Fix this by gating netvsc_set_rxfh() on ndc->rx_table_sz and return -EOPNOTSUPP when the table is absent. This aligns set_rxfh with the device capabilities and prevents incorrect behavior.

Threat Intelligence

EPSS Exploit Probability
6.5% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

References 5

  • git.kernel.org https://git.kernel.org/stable/c/11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3
  • git.kernel.org https://git.kernel.org/stable/c/4cd55c609e85ae2313248ef1a33619a3eef44a16
  • git.kernel.org https://git.kernel.org/stable/c/8288136f508e78eb3563e7073975999cf225a2f9
  • git.kernel.org https://git.kernel.org/stable/c/82c9039c8ebb715753a40434df714f865a3aec9c
  • git.kernel.org https://git.kernel.org/stable/c/d23564955811da493f34412d7de60fa268c8cb50

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.