CVE-2026-53231: 
Linux Kernel vulnerability analysis and mitigation

CVE-2026-53231 is a deadlock vulnerability in the Linux kernel's PHY (Physical Layer) driver subsystem, classified as an improper locking flaw (CWE-667). It occurs when the kernel attempts to set up PHY-driven SFP (Small Form-factor Pluggable) cages using the generic PHY driver (genphy), causing a deadlock on the RTNL (routing netlink) lock. Affected versions include Linux kernel 7.0.x before 7.0.13 and 7.1-rc1 through 7.1-rc7. The vulnerability was published on June 25, 2026, with patches released by July 2, 2026. It carries a CVSS v3.1 base score of 5.5 (Medium) (GitHub Advisory).

The root cause is improper locking (CWE-667) in the Linux kernel's net/phy subsystem. When a commit introduced automatic phy_sfp_probe() calls for all PHY drivers, it inadvertently included the generic PHY driver (genphy), which lacks support for PHY-driven SFP cage setup. Because genphy PHY probing runs while holding the RTNL lock, calling sfp_bus_add_upstream() in this context causes a deadlock — the SFP bus probing code attempts to acquire locks in an order incompatible with the already-held RTNL lock. Prior to the offending commit, phy_sfp_probe() was only called by individual, non-generic PHY drivers, so this code path was never reachable via genphy. The fix restricts phy_sfp_probe() to execute only when a non-genphy driver is in use (GitHub Advisory, Kernel Patch 1, Kernel Patch 2).

Successful exploitation causes a system deadlock in the network subsystem, resulting in a denial of service — the affected system hangs and the network stack becomes unavailable. A local user with low privileges can trigger this condition by configuring or hot-plugging network devices that use the generic PHY driver with SFP cages. There is no impact on confidentiality or data integrity; the sole consequence is high availability impact, scoped to the affected system without privilege escalation or lateral movement potential (GitHub Advisory).

Upgrade to Linux kernel version 7.0.13 or later for the stable 7.0.x branch; the fix is also included in kernel 7.1 and later. Patches are available at the upstream kernel repository (commits 5a0082ec20a0 and ef8d739eee6f). As an interim workaround, avoid using SFP cage configurations with the generic PHY driver (genphy) on affected kernel versions. Systems running 7.1-rc versions should apply the latest stable kernel release (Kernel Patch 1, Kernel Patch 2).