CVE-2023-52505

phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers

State
Published
Severity
Not scored
Published
Mar 2, 2024
Updated
May 11, 2026
Reserved
Feb 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers

The protocol converter configuration registers PCC8, PCCC, PCCD (implemented by the driver), as well as others, control protocol converters from multiple lanes (each represented as a different struct phy). So, if there are simultaneous calls to phy_set_mode_ext() to lanes sharing the same PCC register (either for the "old" or for the "new" protocol), corruption of the values programmed to hardware is possible, because lynx_28g_rmw() has no locking.

Add a spinlock in the struct lynx_28g_priv shared by all lanes, and take the global spinlock from the phy_ops :: set_mode() implementation. There are no other callers which modify PCC registers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8f73b37cf3fbda67ea1e579c3b5785da4e7aa2e3 to before 6f901f8448c6b25ed843796b114471d2a3fc5dfbAffected
  • 8f73b37cf3fbda67ea1e579c3b5785da4e7aa2e3 to before c2d7c79898b427d263c64a4841987eec131f2d4eAffected
  • 8f73b37cf3fbda67ea1e579c3b5785da4e7aa2e3 to before 139ad1143151a07be93bf741d4ea7c89e59f89ceAffected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.59 through 6.1.*Not affected
  • 6.5.8 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.