CVE-2026-45849

MediumCVSS 5.5/10Last modified Jun 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()

ocelot_port_xmit_inj() calls ocelot_can_inject() and ocelot_port_inject_frame() without holding the injection group lock. Both functions contain lockdep_assert_held() for the injection lock, and the correct caller felix_port_deferred_xmit() properly acquires the lock using ocelot_lock_inj_grp() before calling these functions.

Add ocelot_lock_inj_grp()/ocelot_unlock_inj_grp() around the register injection path to fix the missing lock protection. The FDMA path is not affected as it uses its own locking mechanism.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-667

Affected software

VendorProductVersions
LinuxLinux>= 960ec92774e152b677ccd0006abcab7b9dd814c2, < 0b217a40156f497e09dd20d3f7baec40c785f386; >= e83b49ecb569c9c5fa7cc30e55cf2c15f71f9f39, < cc1b179f778f98270bdbbb48d183b4b6427ae198; >= c5e12ac3beb0dd3a718296b2d8af5528e9ab728e, < 7ac58d8832802ec89baa7539e13e6d58a88cce04; >= c5e12ac3beb0dd3a718296b2d8af5528e9ab728e, < 51c32ae7fae14552d79f7139614b77c1bbd57a48; >= c5e12ac3beb0dd3a718296b2d8af5528e9ab728e, < 63da961381e0d979459dede713001f8452364477; >= c5e12ac3beb0dd3a718296b2d8af5528e9ab728e, < 026f6513c5880c2c89e38ad66bbec2868f978605; 609cd73bf38bbd48f1e695e01802114b01aa8811; >= 6.1.107, < 6.1.165; >= 6.6.48, < 6.6.128; >= 6.10.7, < 6.11
LinuxLinux6.11

References

Timeline

Published
May 27, 2026
Last modified
Jun 25, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-45859.8A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects unknown code of the fCVE-2026-458505.5In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum vaCVE-2026-458517.1In the Linux kernel, the following vulnerability has been resolved: efi: Fix reservation of unaccepted memory table The reserve_unacceptedCVE-2026-458527.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix double free in rxe_srq_from_init In rxe_srq_from_init(),CVE-2026-458537.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpu_gmc_get_nps_memrangesCVE-2026-458545.5In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - unregister only available algorithm EIP9CVE-2026-458555.5In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: avoid Non-NCQ command starvation When a non-NCQ commCVE-2026-458567.1In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send CVE-2026-458575.5In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer rn The error exit pathCVE-2026-458585.5In the Linux kernel, the following vulnerability has been resolved: ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 WheCVE-2026-458597.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentaCVE-2026-45866.3A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects the function Upload of the file chat2db-server/chat2db-server-web
CVE-2026-45849: Medium severity, CVSS 5.5 | Vulnix