Medium 5.5Published Apr 17, 2024

CVE-2024-26820hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed

Updated under an hour ago (Oct 28, 2026, 9:40 AM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER handler cannot perform VF register successfully as the register call is received before netvsc_probe is finished. This is because we register register_netdevice_notifier() very early( even before vmbus_driver_register()). To fix this, we try to register each such matching VF( if it is visible as a netdevice) at the end of netvsc_probe.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 028aa21f9e92536038cabb834c15d08f5c894382 before bcb7164258d0a9a8aa2e73ddccc2d78f67d2519d; from 997d895fa495fb3421983923219bba93f1a793ee before c7441c77c91e47f653104be8353b44a3366a5366; from ff6c130e48a79c826cbc2427bd8b34a7592460cc before 5b10a88f64c0315cfdef45de0aaaa4eef57de0b7; from 97683466e24c801ee4e865ce90ac7e355db2da59 before b6d46f306b3964d05055ddaa96b58cd8bd3a472c; from 5dd83db613be8e5c5d30efed7f42780e9eb18380 before 309ef7de5d840e17607e7d65cbf297c0564433ef; from 7350c460f7f48a8653a15c5c90fc9070aaa29535 before a71302c8638939c45e4ba5a99ea438185fd3f418; 85520856466ed6bc3b1ccb013cddac70ceb437db builds before 4d29a58d96a78728cb01ee29ed70dc4bd642f135; 85520856466ed6bc3b1ccb013cddac70ceb437db builds before 9cae43da9867412f8bd09aee5c8a8dc5e8dc3dc2; and 6 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.19.301 before 4.19.310; from 5.4.263 before 5.4.272; from 5.10.203 before 5.10.213; from 5.15.141 before 5.15.152; from 6.1.65 before 6.1.79; from 6.6.4 before 6.6.18; from 6.7 before 6.7.6; 6.8; and 2 more ranges	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/bcb7164258d0a9a8aa2e73ddccc2d78f67d2519d	patch
https://git.kernel.org/stable/c/c7441c77c91e47f653104be8353b44a3366a5366	patch
https://git.kernel.org/stable/c/5b10a88f64c0315cfdef45de0aaaa4eef57de0b7	patch
https://git.kernel.org/stable/c/b6d46f306b3964d05055ddaa96b58cd8bd3a472c	patch
https://git.kernel.org/stable/c/309ef7de5d840e17607e7d65cbf297c0564433ef	patch
https://git.kernel.org/stable/c/a71302c8638939c45e4ba5a99ea438185fd3f418	patch
https://git.kernel.org/stable/c/4d29a58d96a78728cb01ee29ed70dc4bd642f135	patch
https://git.kernel.org/stable/c/9cae43da9867412f8bd09aee5c8a8dc5e8dc3dc2	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	mailing-list
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	mailing-list
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.