CVE-2024-26820

CVE-2024-26820 affects the Linux kernel hv_netvsc driver. The issue occurs when the hv_netvsc module is unloaded and reloaded: the NET_DEVICE_REGISTER handler can fail to register a VF because the VF registration call arrives before netvsc_probe finishes, since register_netdevice_notifier() is re...

CVE-2025-21725

CVE-2025-21725 concerns the Linux kernel CIFS/SMB client. The issue arises when NETWORK_INTERFACE_INFO::LinkSpeed is not guaranteed to be set by the server, potentially causing an oops (divide error) in the cifs client path. The provided connected documents specify the fix as: fix by setting cifs...

CVE-2024-35985

CVE-2024-35985 concerns the Linux kernel vulnerability where the eevdf scheduler could yield an out-of-bounds vlag and a NULL-deref in certain edge cases. The connected Astra/Nessus documents reiterate that reweight_eevdf() could compute vlag beyond the intended bound, since the vlag is used with...