NetSight
medium5.5

CVE-2024-26820

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver is…

Impact

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER handler cannot perform VF register successfully as the register call is received before netvsc_probe is finished. This is because we register register_netdevice_notifier() very early( even before vmbus_driver_register()). To fix this, we try to register each such matching VF( if it is visible as a netdevice) at the end of netvsc_probe.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.301 before 4.19.310
from 5.4.263 before 5.4.272
from 5.10.203 before 5.10.213
from 5.15.141 before 5.15.152
from 6.1.65 before 6.1.79
from 6.6.4 before 6.6.18
DebianDebian Linux
Version 10.0

References