CVE Explorer

CVE-2026-53232

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don't call sfp_bus_del_upstream() in the probe failure path, so let's add it, otherwise the sfp-bus is left with a dangling 'upstream' field, that may be used later on during SFP events. This issue existed before the generic phylib sfp support, back when drivers were calling phy_sfp_probe themselves.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d151ff33736fdb8b9b650d975598c6b106b17b9a3b46b82a91348b058dbed86f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/phy/phy_device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"less…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/phy/phy_device.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"12fb84dc4dc8eb47ebe2b27f7de6255a4a205e1b","status":"affected","version":"298e54fa810e027f1b0800d789eb862592721f08","versionType":"git"},{"lessThan":"9326b654f90a09eadeb796c82801a5609d57f0c8","status":"affected","version":"298e54fa810e027f1b0800d789eb862592721f08","versionType":"git"},{"lessThan":"3a254779c169954fe23328a1db51f67be374f913","status":"affected","version":"298e54fa810e027f1…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions

{"url":"https://git.kernel.org/stable/c/0b27701ce93161d7bbf4b25fa20ca59963b0e20c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/12fb84dc4dc8eb47ebe2b27f7de6255a4a205e1b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/3a254779c169954fe23328a1db51f67be374f913"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/48774e87bbaa0056819d4b52301e4692e50e3252"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/9326b654f90a09eadeb796c82801a5609d57f0c8"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c58cdfe32c7cbffb01937606e1391397d54f40c476398f00939d1fb6e6e7d103 · sha256:9f29ebc7e0ac5c23… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer