CVE-2026-23054

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the networking subsystem related to the hv netvsc driver. Specifically, the driver does not properly validate the presence of a Receive Side Scaling (RSS) indirection table before allowing RSS hash key programming. When a device reports a single receive queue, the rndis filter device add() function fails to allocate the necessary indirection table. Accepting RSS hash key updates in this state can lead to a system hang. The issue is addressed by restricting the netvsc set rxfh() function based on the size of the RX table (ndc->rx table sz) and returning an error if the table is absent. This ensures that RSS hash key updates are only accepted when the device is capable of handling them.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.