Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-53232

net: phy: clean the sfp upstream if phy probing fails

Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfp_bus_del_upstream() in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be used later on during SFP events. This issue existed before the generic phylib sfp support, back when drivers were calling phy_sfp_probe themselves.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 298e54fa810e027f1b0800d789eb862592721f08 to < 12fb84dc4dc8eb47ebe2b27f7de6255a4a205e1baffected
  • 298e54fa810e027f1b0800d789eb862592721f08 to < 9326b654f90a09eadeb796c82801a5609d57f0c8affected
  • 298e54fa810e027f1b0800d789eb862592721f08 to < 3a254779c169954fe23328a1db51f67be374f913affected
  • 298e54fa810e027f1b0800d789eb862592721f08 to < 0b27701ce93161d7bbf4b25fa20ca59963b0e20caffected
  • 298e54fa810e027f1b0800d789eb862592721f08 to < 48774e87bbaa0056819d4b52301e4692e50e3252affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.94 to ≤ 6.12.*unaffected
  • 6.18.36 to ≤ 6.18.*unaffected
  • 7.0.13 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References