VYPR
Medium severity4.7NVD Advisory· Published Mar 2, 2024· Updated Jun 17, 2026

CVE-2023-52505

CVE-2023-52505

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers

The protocol converter configuration registers PCC8, PCCC, PCCD (implemented by the driver), as well as others, control protocol converters from multiple lanes (each represented as a different struct phy). So, if there are simultaneous calls to phy_set_mode_ext() to lanes sharing the same PCC register (either for the "old" or for the "new" protocol), corruption of the values programmed to hardware is possible, because lynx_28g_rmw() has no locking.

Add a spinlock in the struct lynx_28g_priv shared by all lanes, and take the global spinlock from the phy_ops :: set_mode() implementation. There are no other callers which modify PCC registers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Linux/Kernel8 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.18,<6.1.59
    • cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.6:rc5:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 5.18
  • osv-coords
    Range: >= 5.18.0, < 6.1.59

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.