CVE-2023-52505

Source
https://cve.org/CVERecord?id=CVE-2023-52505
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52505.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-52505
Downstream
Published
2024-03-02T21:52:19.215Z
Modified
2026-07-08T07:37:21.373700095Z
Summary
phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers
Details

In the Linux kernel, the following vulnerability has been resolved:

phy: lynx-28g: serialize concurrent physetmode_ext() calls to shared registers

The protocol converter configuration registers PCC8, PCCC, PCCD (implemented by the driver), as well as others, control protocol converters from multiple lanes (each represented as a different struct phy). So, if there are simultaneous calls to physetmodeext() to lanes sharing the same PCC register (either for the "old" or for the "new" protocol), corruption of the values programmed to hardware is possible, because lynx28g_rmw() has no locking.

Add a spinlock in the struct lynx28gpriv shared by all lanes, and take the global spinlock from the phyops :: setmode() implementation. There are no other callers which modify PCC registers.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52505.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8f73b37cf3fbda67ea1e579c3b5785da4e7aa2e3
Fixed
6f901f8448c6b25ed843796b114471d2a3fc5dfb
Fixed
c2d7c79898b427d263c64a4841987eec131f2d4e
Fixed
139ad1143151a07be93bf741d4ea7c89e59f89ce

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52505.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.59
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.5.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52505.json"