The Linux kernel's hv_netvsc network driver accepts RSS hash key configuration updates without verifying the existence of an RX indirection table when the device reports only a single receive queue. This oversight can cause the kernel to hang, leading to an outage of the operating system or services running on it. The flaw does not enable arbitrary code execution but effectively disrupts system availability.

All Linux kernels that ship the unpatched hv_netvsc driver are affected. The issue applies to any distribution or virtual machine environment using the Hyper‑V network virtualization stack. No specific distribution or kernel version is listed, so administrators should verify whether their current kernel contains the patch before relying on the potential impact.

The CVSS base score of 7.0 indicates a high impact, while the EPSS probability of less than 1% and absence from the CISA KEV catalog show a low likelihood of active exploitation. Attackers would need to send an RSS hash key update to the virtual NIC, which typically requires network or administrative access. If triggered, the kernel hang leads to a denial of service that can be mitigated by applying the vendor patch or disabling RSS programming for devices lacking an indirection table.