CVE-2026-53232

A flaw was found in the Linux kernel's network PHY (Physical Layer) driver. When a PHY probing operation fails, the system does not properly clean up the SFP (Small Form-Factor Pluggable) upstream connection. This oversight leaves a dangling reference in the SFP bus, which could be accessed later during SFP events. This improper resource management may lead to system instability or unexpected behavior.

This vulnerability is rated with a Moderate severity impact for Red Hat Enterprise Linux because exploitation requires a hardware initialization failure during network transceiver probing, limiting the risk primarily to a localized denial of service. The flaw resides in phylib's handling of failed device detection routines where an incomplete teardown retains stale state on the SFP bus. Under standard enterprise deployments with functioning hardware, this error path is not traversed, and unprivileged users cannot initiate device probing sequences.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.