PT-2026-6124 · Unknown+3 · Rndis Filter Device Add+4
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23054
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue within the networking subsystem related to the hv netvsc driver. Specifically, the driver does not properly validate the presence of a Receive Side Scaling (RSS) indirection table before allowing RSS hash key programming. When a device reports a single receive queue, the
rndis filter device add() function fails to allocate the necessary indirection table. Accepting RSS hash key updates in this state can lead to a system hang. The issue is addressed by restricting the netvsc set rxfh() function based on the size of the RX table (ndc->rx table sz) and returning an error if the table is absent. This ensures that RSS hash key updates are only accepted when the device is capable of handling them.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu
Hv Netvsc
Netvsc Set Rxfh
Rndis Filter Device Add