CVE-2026-53231 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy We don't have support for PHY-driver SFP cages with the genphy code. On top of that, it was found by sashiko that running sfp_bus_add_upstream() for genphy deadlocks, as for genphy the PHY probing runs under RTNL, which isn't the case for non-genphy drivers. This problem was reproduced, and does lead to a deadlock on RTNL. Before the blamed commit, the phy_sfp_probe() call was made by individual PHY drivers, so there was no way to get to the SFP probing path when using genphy. Let's therefore only run phy_sfp_probe when not using genphy.
A vulnerability in the Linux kernel's handling of PHY-driven SFP cages with genphy drivers has been addressed. The issue arose because the genphy code does not support PHY-driver SFP cages, and probing for genphy PHYs can lead to a deadlock. This deadlock occurs because genphy probing runs under the RTNL, unlike non-genphy drivers. The vulnerability was reproduced and confirmed to cause a deadlock on RTNL. The problem stemmed from a recent change that centralized SFP probing, which inadvertently created a deadlock scenario for genphy drivers. The solution involves restricting the SFP probing to non-genphy drivers only.
Users can apply the latest patches from the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/5a0082ec20a05ef2378410323a5089a8f1786f4a | kernel.org | Patch |
| https://git.kernel.org/stable/c/ef8d739eee6f85303cbecebc01eb72f063de74e0 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-667 | Improper Locking | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 7.0, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 7.1 rc7 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 2, 2026 | Initial Analysis | [email protected] |
| Jun 25, 2026 | New CVE Received | kernel.org |