CVE-2024-26820: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed If hv_netvsc driver is unloaded and reloaded, the NET_DEVICE_REGISTER handler cannot perform VF register successfully as the register call is received before netvsc_probe is finished. This is because we register register_netdevice_notifier() very early( even before vmbus_driver_register()). To fix this, we try to register each such matching VF( if it is visible as a netdevice) at the end of netvsc_probe.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 4.19.301, before 4.19.310 (fixed in 4.19.310); from 5.4.263, before 5.4.272 (fixed in 5.4.272); from 5.10.203, before 5.10.213 (fixed in 5.10.213); from 5.15.141, before 5.15.152 (fixed in 5.15.152); from 6.1.65, before 6.1.79 (fixed in 6.1.79); from 6.6.4, before 6.6.18 (fixed in 6.6.18); …

Published 2024-04-17. Last modified 2026-06-17.