CVE-2026-53231

net: phy: don't try to setup PHY-driven SFP cages when using genphy

published June 25, 2026

CVSS
—
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: phy: don't try to setup PHY-driven SFP cages when using genphy

We don't have support for PHY-driver SFP cages with the genphy code.

On top of that, it was found by sashiko that running

sfp_bus_add_upstream() for genphy deadlocks, as for genphy the PHY

probing runs under RTNL, which isn't the case for non-genphy drivers.

This problem was reproduced, and does lead to a deadlock on RTNL.

Before the blamed commit, the phy_sfp_probe() call was made by

individual PHY drivers, so there was no way to get to the SFP probing

path when using genphy.

Let's therefore only run phy_sfp_probe when not using genphy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00083 · 0.2th percentile
Published
2026-06-25T08:39Z
EPSS history
Timeline
  • 25 JUN 08:39Z
    net: phy: don't try to setup PHY-driven SFP cages when using genphy
    cvelistv5