Answer in brief
CVE-2026-23054 records a Unknown severity vulnerability in net: hv_netvsc: reject RSS hash key programming without RX indirection table. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (generic), Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 <8288136f508e78eb3563e7073975999cf225a2f9 || >=962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 <82c9039c8ebb715753a40434df714f865a3aec9c || >=962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 <4cd55c609e85ae2313248ef1a33619a3eef44a16 || >=962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 <11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3 || >=962f3fee83a4ef9010ae84dc43ae7aecb572e2a9 <d23564955811da493f34412d7de60fa268c8cb50 | 8288136f508e78eb3563e7073975999cf225a2f9, 82c9039c8ebb715753a40434df714f865a3aec9c, 4cd55c609e85ae2313248ef1a33619a3eef44a16, 11dd9a9ef4dc4507a15a69b8511a0013c6c28fa3, d23564955811da493f34412d7de60fa268c8cb50 |
| Linux/Linuxgeneric | 4.11 | Not reported |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFPgeneric | >=V3.1.6 <* | * |
Published upstream
Feb 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 14, 2026
In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndis_filter_device_add() does not allocate an indirection table, accepting RSS hash key updates in this state leads to a hang. Fix this by gating netvsc_set_rxfh() on ndc->rx_table_sz and return -EOPNOTSUPP when the table is absent. This aligns set_rxfh with the device capabilities and prevents incorrect behavior.
Quoted source text, attributed separately from HOL analysis.