Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy We don't have support for PHY-driver SFP cages with the genphy code. On top of that, it was found by sashiko that running sfp_bus_add_upstream() for genphy deadlocks, as for genphy the PHY probing runs under RTNL, which isn't the case for non-genphy drivers. This problem was reproduced, and does lead to a deadlock on RTNL. Before the blamed commit, the phy_sfp_probe() call was made by individual PHY drivers, so there was no way to get to the SFP probing path when using genphy. Let's therefore only run phy_sfp_probe when not using genphy.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 7.0, < 7.0.13 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/5a0082ec20a05ef2378410323a5089a8f1786f4aPatch
- https://git.kernel.org/stable/c/ef8d739eee6f85303cbecebc01eb72f063de74e0Patch
FAQ
What is CVE-2026-53231?
CVE-2026-53231 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages when using genphy We don't have support for PHY-driver SFP cages with the genphy...
How severe is CVE-2026-53231?
CVE-2026-53231 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53231?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.