CVE-2024-26820

CVE-2024-26820

Medium · published April 17, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed

If hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER

handler cannot perform VF register successfully as the register call

is received before netvsc_probe is finished. This is because we

register register_netdevice_notifier() very early( even before

vmbus_driver_register()).

To fix this, we try to register each such matching VF( if it is visible

as a netdevice) at the end of netvsc_probe.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 14.0th percentile
Published
2024-04-17T14:15Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19.301, < 4.19.3104.19.310
linux/linux_kernel≥ 5.4.263, < 5.4.2725.4.272
linux/linux_kernel≥ 5.10.203, < 5.10.2135.10.213
linux/linux_kernel≥ 5.15.141, < 5.15.1525.15.152
linux/linux_kernel≥ 6.1.65, < 6.1.796.1.79
linux/linux_kernel≥ 6.6.4, < 6.6.186.6.18
linux/linux_kernel≥ 6.7, < 6.7.66.7.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (19)
https://git.kernel.org/stable/c/309ef7de5d840e17607e7d65cbf297c0564433ef · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4d29a58d96a78728cb01ee29ed70dc4bd642f135 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5b10a88f64c0315cfdef45de0aaaa4eef57de0b7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9cae43da9867412f8bd09aee5c8a8dc5e8dc3dc2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a71302c8638939c45e4ba5a99ea438185fd3f418 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b6d46f306b3964d05055ddaa96b58cd8bd3a472c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bcb7164258d0a9a8aa2e73ddccc2d78f67d2519d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c7441c77c91e47f653104be8353b44a3366a5366 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/309ef7de5d840e17607e7d65cbf297c0564433ef · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4d29a58d96a78728cb01ee29ed70dc4bd642f135 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/5b10a88f64c0315cfdef45de0aaaa4eef57de0b7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9cae43da9867412f8bd09aee5c8a8dc5e8dc3dc2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a71302c8638939c45e4ba5a99ea438185fd3f418 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/b6d46f306b3964d05055ddaa96b58cd8bd3a472c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/bcb7164258d0a9a8aa2e73ddccc2d78f67d2519d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/c7441c77c91e47f653104be8353b44a3366a5366 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 17 APR 09:43Z
    hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
    cvelistv5