CVE-2026-53231
- Source
- https://cve.org/CVERecord?id=CVE-2026-53231
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53231.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-53231
- Downstream
- Published
- 2026-06-25T08:39:29.871Z
- Modified
- 2026-07-08T08:09:46.437423547Z
- Summary
- net: phy: don't try to setup PHY-driven SFP cages when using genphy
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: phy: don't try to setup PHY-driven SFP cages when using genphy
We don't have support for PHY-driver SFP cages with the genphy code.
On top of that, it was found by sashiko that running sfpbusadd_upstream() for genphy deadlocks, as for genphy the PHY probing runs under RTNL, which isn't the case for non-genphy drivers.
This problem was reproduced, and does lead to a deadlock on RTNL.
Before the blamed commit, the physfpprobe() call was made by individual PHY drivers, so there was no way to get to the SFP probing path when using genphy.
Let's therefore only run physfpprobe when not using genphy.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53231.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/5a0082ec20a05ef2378410323a5089a8f1786f4a
- https://git.kernel.org/stable/c/ef8d739eee6f85303cbecebc01eb72f063de74e0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53231.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-53231
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git