CVE-2024-26820
hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
Reported by linux · Published April 17, 2024
In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER handler cannot perform VF register successfully as the register call is received before netvsc_probe is finished. This is because we register register_netdevice_notifier() very early( even before vmbus_driver_register()). To fix this, we try to register each such matching VF( if it is visible as a netdevice) at the end of netvsc_probe.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| kernel-libbpf-devel | Amazon Linux | 6.1.79-99.164.amzn2023 |
| bpftool | Amazon Linux | 6.1.79-99.164.amzn2023 |
| kernel-devel | Amazon Linux | 6.1.79-99.164.amzn2023 |
| kernel | Amazon Linux | 6.1.79-99.164.amzn2023 |
| kernel-headers | Amazon Linux | 6.1.79-99.164.amzn2023 |
| kernel-tools-devel | Amazon Linux | 6.1.79-99.164.amzn2023 |
| linux_kernel | linux | 6.7.6, 6.6.18, 6.1.79, 5.15.152, 5.10.213, 5.4.272, 4.19.310 |
| Linux | Linux | c7441c77c91e47f653104be8353b44a3366a5366, bcb7164258d0a9a8aa2e73ddccc2d78f67d2519d, b6d46f306b3964d05055ddaa96b58cd8bd3a472c, a71302c8638939c45e4ba5a99ea438185fd3f418, 6.7, 5b10a88f64c0315cfdef45de0aaaa4eef57de0b7, 4d29a58d96a78728cb01ee29ed70dc4bd642f135, 309ef7de5d840e17607e7d65cbf297c0564433ef |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 028aa21f9e92536038cabb834c15d08f5c894382, 997d895fa495fb3421983923219bba93f1a793ee, ff6c130e48a79c826cbc2427bd8b34a7592460cc |
| Linux | Linux | 6.7, 0, 4.19.310 |
| amazon:2023 | kernel-libbpf-devel | 0 |
| amazon:2023 | bpftool | 0 |
| amazon:2023 | kernel-devel | 0 |
| amazon:2023 | kernel | 0 |
| amazon:2023 | kernel-headers | 0 |
| amazon:2023 | kernel-tools-devel | 0 |
| Linux | Linux | 6.6.4, 4.19.310, 5.4.272 |
| amazon:2023 | kernel-libbpf-static | 0 |
| amazon:2023 | perf | 0 |
| amazon:2023 | kernel-livepatch-6.1.79-99.164 | 0 |
| amazon:2023 | kernel-libbpf | 0 |
| amazon:2023 | kernel-modules-extra | 0 |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | 0 |
| amazon:2023 | kernel-tools | 0 |
| amazon:2023 | kernel-modules-extra-common | 0 |
| amazon:2023 | python3-perf | 0 |
| linux | linux_kernel | 5.4.263, 5.10.203, 5.15.141 |
Timeline
- Mar 5, 2024 CVE Published
- Apr 18, 2024 EPSS Score (30 in total, the first dated here)
- Oct 4, 2024 Coalition ESS Score (15 in total, the first dated here)
- Jan 15, 2026 Security Advisory (153 in total, the first dated here)
- Mar 30, 2026 Distribution Patch (102 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-26820
vulnetix vdb fixes CVE-2024-26820Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-26820/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart