CVE-2026-45849 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() ocelot_port_xmit_inj() calls ocelot_can_inject() and ocelot_port_inject_frame() without holding the injection group lock. Both functions contain lockdep_assert_held() for the injection lock, and the correct caller felix_port_deferred_xmit() properly acquires the lock using ocelot_lock_inj_grp() before calling these functions. Add ocelot_lock_inj_grp()/ocelot_unlock_inj_grp() around the register injection path to fix the missing lock protection. The FDMA path is not affected as it uses its own locking mechanism.
A vulnerability exists in the Linux kernel's handling of the Ocelot switch's injection path. The issue arises because the function 'ocelot_port_xmit_inj()' calls 'ocelot_can_inject()' and 'ocelot_port_inject_frame()'' without holding the necessary injection group lock. This oversight can lead to race conditions, as these functions expect the lock to be held, but the caller does not. The problem has been addressed by adding the appropriate lock and unlock functions around the injection path, ensuring that the lock is properly managed. This vulnerability affects the Ocelot switch driver in the Linux kernel.
The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version that includes this fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/026f6513c5880c2c89e38ad66bbec2868f978605 | kernel.org | Patch |
| https://git.kernel.org/stable/c/0b217a40156f497e09dd20d3f7baec40c785f386 | kernel.org | Patch |
| https://git.kernel.org/stable/c/51c32ae7fae14552d79f7139614b77c1bbd57a48 | kernel.org | Patch |
| https://git.kernel.org/stable/c/63da961381e0d979459dede713001f8452364477 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7ac58d8832802ec89baa7539e13e6d58a88cce04 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cc1b179f778f98270bdbbb48d183b4b6427ae198 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-667 | Improper Locking | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.1.107, < 6.1.165 >= 6.6.48, < 6.6.128 >= 6.10.7, < 6.11 >= 6.11.1, < 6.12.75 >= 6.13, < 6.18.14 >= 6.19, < 6.19.4 6.11 - 6.11 rc5 6.11 rc6 6.11 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 25, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 27, 2026 | New CVE Received | kernel.org |