CVE-2026-45849 (GCVE-0-2026-45849)
Vulnerability from cvelistv5
Published
2026-05-27 12:15
Modified
2026-05-27 12:15
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj() ocelot_port_xmit_inj() calls ocelot_can_inject() and ocelot_port_inject_frame() without holding the injection group lock. Both functions contain lockdep_assert_held() for the injection lock, and the correct caller felix_port_deferred_xmit() properly acquires the lock using ocelot_lock_inj_grp() before calling these functions. Add ocelot_lock_inj_grp()/ocelot_unlock_inj_grp() around the register injection path to fix the missing lock protection. The FDMA path is not affected as it uses its own locking mechanism.
References
Impacted products
Vendor Product Version
Linux Linux Version: 960ec92774e152b677ccd0006abcab7b9dd814c2
Version: e83b49ecb569c9c5fa7cc30e55cf2c15f71f9f39
Version: c5e12ac3beb0dd3a718296b2d8af5528e9ab728e
Version: c5e12ac3beb0dd3a718296b2d8af5528e9ab728e
Version: c5e12ac3beb0dd3a718296b2d8af5528e9ab728e
Version: c5e12ac3beb0dd3a718296b2d8af5528e9ab728e
Version: 609cd73bf38bbd48f1e695e01802114b01aa8811
Version: 6.1.107   ≤
Version: 6.6.48   ≤
Version: 6.10.7   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/mscc/ocelot_net.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0b217a40156f497e09dd20d3f7baec40c785f386",
              "status": "affected",
              "version": "960ec92774e152b677ccd0006abcab7b9dd814c2",
              "versionType": "git"
            },
            {
              "lessThan": "cc1b179f778f98270bdbbb48d183b4b6427ae198",
              "status": "affected",
              "version": "e83b49ecb569c9c5fa7cc30e55cf2c15f71f9f39",
              "versionType": "git"
            },
            {
              "lessThan": "7ac58d8832802ec89baa7539e13e6d58a88cce04",
              "status": "affected",
              "version": "c5e12ac3beb0dd3a718296b2d8af5528e9ab728e",
              "versionType": "git"
            },
            {
              "lessThan": "51c32ae7fae14552d79f7139614b77c1bbd57a48",
              "status": "affected",
              "version": "c5e12ac3beb0dd3a718296b2d8af5528e9ab728e",
              "versionType": "git"
            },
            {
              "lessThan": "63da961381e0d979459dede713001f8452364477",
              "status": "affected",
              "version": "c5e12ac3beb0dd3a718296b2d8af5528e9ab728e",
              "versionType": "git"
            },
            {
              "lessThan": "026f6513c5880c2c89e38ad66bbec2868f978605",
              "status": "affected",
              "version": "c5e12ac3beb0dd3a718296b2d8af5528e9ab728e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "609cd73bf38bbd48f1e695e01802114b01aa8811",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.165",
              "status": "affected",
              "version": "6.1.107",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.128",
              "status": "affected",
              "version": "6.6.48",
              "versionType": "semver"
            },
            {
              "lessThan": "6.11",
              "status": "affected",
              "version": "6.10.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/mscc/ocelot_net.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.11"
            },
            {
              "lessThan": "6.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.165",
                  "versionStartIncluding": "6.1.107",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.128",
                  "versionStartIncluding": "6.6.48",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.14",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.4",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "6.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.10.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()\n\nocelot_port_xmit_inj() calls ocelot_can_inject() and\nocelot_port_inject_frame() without holding the injection group lock.\nBoth functions contain lockdep_assert_held() for the injection lock,\nand the correct caller felix_port_deferred_xmit() properly acquires\nthe lock using ocelot_lock_inj_grp() before calling these functions.\n\nAdd ocelot_lock_inj_grp()/ocelot_unlock_inj_grp() around the register\ninjection path to fix the missing lock protection. The FDMA path is not\naffected as it uses its own locking mechanism."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T12:15:15.494Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0b217a40156f497e09dd20d3f7baec40c785f386"
        },
        {
          "url": "https://git.kernel.org/stable/c/cc1b179f778f98270bdbbb48d183b4b6427ae198"
        },
        {
          "url": "https://git.kernel.org/stable/c/7ac58d8832802ec89baa7539e13e6d58a88cce04"
        },
        {
          "url": "https://git.kernel.org/stable/c/51c32ae7fae14552d79f7139614b77c1bbd57a48"
        },
        {
          "url": "https://git.kernel.org/stable/c/63da961381e0d979459dede713001f8452364477"
        },
        {
          "url": "https://git.kernel.org/stable/c/026f6513c5880c2c89e38ad66bbec2868f978605"
        }
      ],
      "title": "net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-45849",
    "datePublished": "2026-05-27T12:15:15.494Z",
    "dateReserved": "2026-05-13T15:03:33.078Z",
    "dateUpdated": "2026-05-27T12:15:15.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.