CVE-2026-53231
- Source
- https://cve.org/CVERecord?id=CVE-2026-53231
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-53231.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-53231
- Downstream
- Published
- 2026-06-25T08:39:29Z
- Modified
- 2026-08-12T03:30:12Z
- Summary
- net: phy: don't try to setup PHY-driven SFP cages when using genphy
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: phy: don't try to setup PHY-driven SFP cages when using genphy
We don't have support for PHY-driver SFP cages with the genphy code.
On top of that, it was found by sashiko that running sfp_bus_add_upstream() for genphy deadlocks, as for genphy the PHY probing runs under RTNL, which isn't the case for non-genphy drivers.
This problem was reproduced, and does lead to a deadlock on RTNL.
Before the blamed commit, the phy_sfp_probe() call was made by individual PHY drivers, so there was no way to get to the SFP probing path when using genphy.
Let's therefore only run phy_sfp_probe when not using genphy.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53231.json" }- References
-
- https://git.kernel.org/stable/c/5a0082ec20a05ef2378410323a5089a8f1786f4a
- https://git.kernel.org/stable/c/ef8d739eee6f85303cbecebc01eb72f063de74e0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53231.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-53231
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git