Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23054

net: hv_netvsc: reject RSS hash key programming without RX indirection table

Description

In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndis_filter_device_add() does not allocate an indirection table, accepting RSS hash key updates in this state leads to a hang. Fix this by gating netvsc_set_rxfh() on ndc->rx_table_sz and return -EOPNOTSUPP when the table is absent. This aligns set_rxfh with the device capabilities and prevents incorrect behavior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to < 8288136f508e78eb3563e7073975999cf225a2f9affected
  • 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to < 82c9039c8ebb715753a40434df714f865a3aec9caffected
  • 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to < 4cd55c609e85ae2313248ef1a33619a3eef44a16affected
  • 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to < 11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3affected
  • 962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 to < d23564955811da493f34412d7de60fa268c8cb50affected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 6.1.162 to ≤ 6.1.*unaffected
  • 6.6.122 to ≤ 6.6.*unaffected
  • 6.12.67 to ≤ 6.12.*unaffected
  • 6.18.7 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References