[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-26698":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":76,"related":77,"reserved_at":9,"published_at":81,"modified_at":82,"state":83,"summary":84,"references_raw":93,"kevs":126,"epss":127,"epss_history":130,"metrics":354,"affected":360},"CVE-2024-26698","In the Linux kernel, the following vulnerability has been resolved:\n\nhv_netvsc: Fix race condition between netvsc_probe and netvsc_remove\n\nIn commit ac5047671758 (\"hv_netvsc: Disable NAPI before closing the\nVMBus channel\"), napi_disable was getting called for all channels,\nincluding all subchannels without confirming if they are enabled or not.\n\nThis caused hv_netvsc getting hung at napi_disable, when netvsc_probe()\nhas finished running but nvdev->subchan_work has not started yet.\nnetvsc_subchan_work() -> rndis_set_subchannel() has not created the\nsub-channels and because of that netvsc_sc_open() is not running.\nnetvsc_remove() calls cancel_work_sync(&nvdev->subchan_work), for which\nnetvsc_subchan_work did not run.\n\nnetif_napi_add() sets the bit NAPI_STATE_SCHED because it ensures NAPI\ncannot be scheduled. Then netvsc_sc_open() -> napi_enable will clear the\nNAPIF_STATE_SCHED bit, so it can be scheduled. napi_disable() does the\nopposite.\n\nNow during netvsc_device_remove(), when napi_disable is called for those\nsubchannels, napi_disable gets stuck on infinite msleep.\n\nThis fix addresses this problem by ensuring that napi_disable() is not\ngetting called for non-enabled NAPI struct.\nBut netif_napi_del() is still necessary for these non-enabled NAPI struct\nfor cleanup purpose.\n\nCall trace:\n[  654.559417] task:modprobe        state:D stack:    0 pid: 2321 ppid:  1091 flags:0x00004002\n[  654.568030] Call Trace:\n[  654.571221]  \u003CTASK>\n[  654.573790]  __schedule+0x2d6/0x960\n[  654.577733]  schedule+0x69/0xf0\n[  654.581214]  schedule_timeout+0x87/0x140\n[  654.585463]  ? __bpf_trace_tick_stop+0x20/0x20\n[  654.590291]  msleep+0x2d/0x40\n[  654.593625]  napi_disable+0x2b/0x80\n[  654.597437]  netvsc_device_remove+0x8a/0x1f0 [hv_netvsc]\n[  654.603935]  rndis_filter_device_remove+0x194/0x1c0 [hv_netvsc]\n[  654.611101]  ? do_wait_intr+0xb0/0xb0\n[  654.615753]  netvsc_remove+0x7c/0x120 [hv_netvsc]\n[  654.621675]  vmbus_remove+0x27/0x40 [hv_vmbus]",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[],[],[32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74],{"_key":33},"SUSE-SU-2024:2008-1",{"_key":35},"SUSE-SU-2024:2019-1",{"_key":37},"SUSE-SU-2024:2190-1",{"_key":39},"DLA-3842-1",{"_key":41},"DSA-5681-1",{"_key":43},"DEBIAN-CVE-2024-26698",{"_key":45},"RHSA-2024:4831",{"_key":47},"RHSA-2024:5101",{"_key":49},"RHSA-2024:6297",{"_key":51},"RHSA-2024:6993",{"_key":53},"RHSA-2024:4823",{"_key":55},"UBUNTU-CVE-2024-26698",{"_key":57},"USN-6766-1",{"_key":59},"USN-6766-2",{"_key":61},"USN-6766-3",{"_key":63},"USN-6795-1",{"_key":65},"USN-6828-1",{"_key":67},"USN-6895-1",{"_key":69},"USN-6895-2",{"_key":71},"USN-6895-3",{"_key":73},"USN-6895-4",{"_key":75},"USN-6900-1",[],[78,79,80],{"_key":33},{"_key":35},{"_key":37},"2024-04-03T14:54:58.577Z","2026-05-11T20:02:28.322Z","Analyzed",{"cisa_kev":85,"cisa_ransomware":85,"cisa_vendor":9,"epss_severity":86,"epss_score":87,"severity":88,"severity_score":89,"severity_version":90,"severity_source":91,"severity_vector":92,"severity_status":83},false,"low",0.0001,"medium",4.7,"v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",[94,100,104,108,112,116,120],{"url":95,"sources":96,"tags":98},"https://git.kernel.org/stable/c/9ec807e7b6f5fcf9499f3baa69f254bb239a847f",[97,91],"cve.org",[99],"Patch",{"url":101,"sources":102,"tags":103},"https://git.kernel.org/stable/c/7656372ae190e54e8c8cf1039725a5ea59fdf84a",[97,91],[99],{"url":105,"sources":106,"tags":107},"https://git.kernel.org/stable/c/48a8ccccffbae10c91d31fc872db5c31aba07518",[97,91],[99],{"url":109,"sources":110,"tags":111},"https://git.kernel.org/stable/c/22a77c0f5b8233237731df3288d067af51a2fd7b",[97,91],[99],{"url":113,"sources":114,"tags":115},"https://git.kernel.org/stable/c/0e8875de9dad12805ff66e92cd5edea6a421f1cd",[97,91],[99],{"url":117,"sources":118,"tags":119},"https://git.kernel.org/stable/c/e0526ec5360a48ad3ab2e26e802b0532302a7e11",[97,91],[99],{"url":121,"sources":122,"tags":123},"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html",[97,91],[124,125],"X Transferred","Mailing List",[],{"date":128,"score":87,"percentile":129},"2026-06-03",0.01086,[131,135,137,140,142,144,147,149,151,153,155,157,159,161,163,167,170,173,175,177,180,182,184,186,188,190,192,194,197,200,202,205,208,211,213,215,218,220,223,226,229,231,233,235,238,240,242,244,246,249,251,254,256,258,261,263,265,267,269,271,273,276,279,282,285,288,291,294,297,299,301,304,306,309,311,313,316,318,320,322,325,328,331,334,336,339,342,345,348,351],{"date":132,"score":133,"percentile":134},"2025-11-04",0.00006,0.00249,{"date":136,"score":133,"percentile":134},"2025-11-05",{"date":138,"score":133,"percentile":139},"2025-11-06",0.00251,{"date":141,"score":133,"percentile":134},"2025-11-07",{"date":143,"score":133,"percentile":134},"2025-11-08",{"date":145,"score":133,"percentile":146},"2025-11-09",0.00248,{"date":148,"score":133,"percentile":134},"2025-11-10",{"date":150,"score":133,"percentile":134},"2025-11-11",{"date":152,"score":133,"percentile":134},"2025-11-12",{"date":154,"score":133,"percentile":134},"2025-11-13",{"date":156,"score":133,"percentile":134},"2025-11-14",{"date":158,"score":133,"percentile":146},"2025-11-15",{"date":160,"score":133,"percentile":146},"2025-11-16",{"date":162,"score":133,"percentile":146},"2025-11-17",{"date":164,"score":165,"percentile":166},"2025-11-18",0.0007,0.17403,{"date":168,"score":165,"percentile":169},"2025-11-19",0.17422,{"date":171,"score":165,"percentile":172},"2025-11-20",0.17397,{"date":174,"score":133,"percentile":139},"2025-11-21",{"date":176,"score":133,"percentile":139},"2025-11-22",{"date":178,"score":133,"percentile":179},"2025-11-23",0.0025,{"date":181,"score":133,"percentile":179},"2025-11-24",{"date":183,"score":133,"percentile":134},"2025-11-25",{"date":185,"score":133,"percentile":146},"2025-11-26",{"date":187,"score":133,"percentile":146},"2025-11-27",{"date":189,"score":133,"percentile":179},"2025-11-28",{"date":191,"score":133,"percentile":134},"2025-11-29",{"date":193,"score":133,"percentile":134},"2025-11-30",{"date":195,"score":133,"percentile":196},"2025-12-01",0.00247,{"date":198,"score":133,"percentile":199},"2025-12-02",0.00246,{"date":201,"score":133,"percentile":196},"2025-12-03",{"date":203,"score":133,"percentile":204},"2025-12-04",0.00254,{"date":206,"score":133,"percentile":207},"2025-12-05",0.00255,{"date":209,"score":133,"percentile":210},"2025-12-06",0.00253,{"date":212,"score":133,"percentile":210},"2025-12-07",{"date":214,"score":133,"percentile":204},"2025-12-08",{"date":216,"score":133,"percentile":217},"2025-12-09",0.00264,{"date":219,"score":133,"percentile":217},"2025-12-10",{"date":221,"score":133,"percentile":222},"2025-12-11",0.00267,{"date":224,"score":133,"percentile":225},"2025-12-12",0.00272,{"date":227,"score":133,"percentile":228},"2025-12-13",0.00271,{"date":230,"score":133,"percentile":217},"2025-12-14",{"date":232,"score":133,"percentile":217},"2025-12-15",{"date":234,"score":133,"percentile":217},"2025-12-16",{"date":236,"score":133,"percentile":237},"2025-12-17",0.0026,{"date":239,"score":133,"percentile":237},"2025-12-18",{"date":241,"score":133,"percentile":237},"2025-12-19",{"date":243,"score":133,"percentile":237},"2025-12-20",{"date":245,"score":133,"percentile":237},"2025-12-21",{"date":247,"score":133,"percentile":248},"2025-12-22",0.00261,{"date":250,"score":133,"percentile":248},"2025-12-23",{"date":252,"score":133,"percentile":253},"2025-12-24",0.00259,{"date":255,"score":133,"percentile":253},"2025-12-25",{"date":257,"score":133,"percentile":253},"2025-12-26",{"date":259,"score":133,"percentile":260},"2025-12-27",0.00263,{"date":262,"score":133,"percentile":237},"2025-12-28",{"date":264,"score":133,"percentile":253},"2025-12-29",{"date":266,"score":133,"percentile":253},"2025-12-30",{"date":268,"score":133,"percentile":253},"2025-12-31",{"date":270,"score":133,"percentile":237},"2026-01-01",{"date":272,"score":133,"percentile":248},"2026-01-02",{"date":274,"score":87,"percentile":275},"2026-01-03",0.00755,{"date":277,"score":87,"percentile":278},"2026-01-04",0.00744,{"date":280,"score":87,"percentile":281},"2026-01-05",0.00749,{"date":283,"score":87,"percentile":284},"2026-01-06",0.00746,{"date":286,"score":87,"percentile":287},"2026-01-07",0.00745,{"date":289,"score":87,"percentile":290},"2026-01-08",0.0075,{"date":292,"score":87,"percentile":293},"2026-01-09",0.00759,{"date":295,"score":87,"percentile":296},"2026-01-10",0.00761,{"date":298,"score":87,"percentile":296},"2026-01-11",{"date":300,"score":87,"percentile":293},"2026-01-12",{"date":302,"score":87,"percentile":303},"2026-01-13",0.00757,{"date":305,"score":87,"percentile":303},"2026-01-14",{"date":307,"score":87,"percentile":308},"2026-01-15",0.00762,{"date":310,"score":87,"percentile":296},"2026-01-16",{"date":312,"score":87,"percentile":308},"2026-01-17",{"date":314,"score":87,"percentile":315},"2026-01-18",0.00764,{"date":317,"score":87,"percentile":296},"2026-01-19",{"date":319,"score":87,"percentile":303},"2026-01-20",{"date":321,"score":87,"percentile":275},"2026-01-21",{"date":323,"score":87,"percentile":324},"2026-01-22",0.00756,{"date":326,"score":87,"percentile":327},"2026-01-23",0.00766,{"date":329,"score":87,"percentile":330},"2026-01-24",0.00773,{"date":332,"score":87,"percentile":333},"2026-01-25",0.00774,{"date":335,"score":87,"percentile":333},"2026-01-26",{"date":337,"score":87,"percentile":338},"2026-01-27",0.00778,{"date":340,"score":87,"percentile":341},"2026-01-28",0.00775,{"date":343,"score":87,"percentile":344},"2026-01-29",0.00777,{"date":346,"score":87,"percentile":347},"2026-01-30",0.00789,{"date":349,"score":87,"percentile":350},"2026-01-31",0.00796,{"date":352,"score":87,"percentile":353},"2026-02-01",0.00802,[355],{"source":91,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":356,"cvss_v4_0":9},{"baseScore":89,"baseSeverity":357,"vectorString":92,"impactScore":358,"exploitabilityScore":359},"MEDIUM",6,2.6,[361,370,399],{"ecosystem":9,"name":362,"vendor":363,"product":364,"cpe_part":365,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":366},"debian linux","debian","debian_linux","o",[367],{"version":368,"is_range":85,"range_type":369,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0","cpe",{"ecosystem":9,"name":371,"vendor":372,"product":372,"cpe_part":373,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":374},"Linux","linux","a",[375,382,385,388,391,394,397],{"version":376,"is_range":377,"range_type":97,"version_start":378,"version_start_type":379,"version_end":380,"version_end_type":381,"fixed_in":9},">= ac5047671758ad4be9f93898247b3a8b6dfde4c7, \u003C 9ec807e7b6f5fcf9499f3baa69f254bb239a847f",true,"ac5047671758ad4be9f93898247b3a8b6dfde4c7","including","9ec807e7b6f5fcf9499f3baa69f254bb239a847f","excluding",{"version":383,"is_range":377,"range_type":97,"version_start":378,"version_start_type":379,"version_end":384,"version_end_type":381,"fixed_in":9},">= ac5047671758ad4be9f93898247b3a8b6dfde4c7, \u003C 7656372ae190e54e8c8cf1039725a5ea59fdf84a","7656372ae190e54e8c8cf1039725a5ea59fdf84a",{"version":386,"is_range":377,"range_type":97,"version_start":378,"version_start_type":379,"version_end":387,"version_end_type":381,"fixed_in":9},">= ac5047671758ad4be9f93898247b3a8b6dfde4c7, \u003C 48a8ccccffbae10c91d31fc872db5c31aba07518","48a8ccccffbae10c91d31fc872db5c31aba07518",{"version":389,"is_range":377,"range_type":97,"version_start":378,"version_start_type":379,"version_end":390,"version_end_type":381,"fixed_in":9},">= ac5047671758ad4be9f93898247b3a8b6dfde4c7, \u003C 22a77c0f5b8233237731df3288d067af51a2fd7b","22a77c0f5b8233237731df3288d067af51a2fd7b",{"version":392,"is_range":377,"range_type":97,"version_start":378,"version_start_type":379,"version_end":393,"version_end_type":381,"fixed_in":9},">= ac5047671758ad4be9f93898247b3a8b6dfde4c7, \u003C 0e8875de9dad12805ff66e92cd5edea6a421f1cd","0e8875de9dad12805ff66e92cd5edea6a421f1cd",{"version":395,"is_range":377,"range_type":97,"version_start":378,"version_start_type":379,"version_end":396,"version_end_type":381,"fixed_in":9},">= ac5047671758ad4be9f93898247b3a8b6dfde4c7, \u003C e0526ec5360a48ad3ab2e26e802b0532302a7e11","e0526ec5360a48ad3ab2e26e802b0532302a7e11",{"version":398,"is_range":85,"range_type":97,"version_start":398,"version_start_type":379,"version_end":398,"version_end_type":379,"fixed_in":9},"5.8",{"ecosystem":9,"name":400,"vendor":372,"product":401,"cpe_part":365,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":402},"linux kernel","linux_kernel",[403,406,410,414,418,422,424],{"version":404,"is_range":377,"range_type":369,"version_start":398,"version_start_type":379,"version_end":405,"version_end_type":381,"fixed_in":9},"gte5.8_lt5.10.210","5.10.210",{"version":407,"is_range":377,"range_type":369,"version_start":408,"version_start_type":379,"version_end":409,"version_end_type":381,"fixed_in":9},"gte5.11_lt5.15.149","5.11","5.15.149",{"version":411,"is_range":377,"range_type":369,"version_start":412,"version_start_type":379,"version_end":413,"version_end_type":381,"fixed_in":9},"gte5.16_lt6.1.79","5.16","6.1.79",{"version":415,"is_range":377,"range_type":369,"version_start":416,"version_start_type":379,"version_end":417,"version_end_type":381,"fixed_in":9},"gte6.2_lt6.6.18","6.2","6.6.18",{"version":419,"is_range":377,"range_type":369,"version_start":420,"version_start_type":379,"version_end":421,"version_end_type":381,"fixed_in":9},"gte6.7_lt6.7.6","6.7","6.7.6",{"version":423,"is_range":85,"range_type":369,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.8:rc1",{"version":425,"is_range":85,"range_type":369,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.8:rc2"]