CVE-2026-45849: net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
In the Linux kernel, the following vulnerability has been resolved:
net: mscc: ocelot: add missing lock protection in ocelotportxmitinj()
ocelotportxmitinj() calls ocelotcaninject() and ocelotportinjectframe() without holding the injection group lock. Both functions contain lockdepassertheld() for the injection lock, and the correct caller felixportdeferredxmit() properly acquires the lock using ocelotlockinjgrp() before calling these functions.
Add ocelotlockinjgrp()/ocelotunlockinjgrp() around the register injection path to fix the missing lock protection. The FDMA path is not affected as it uses its own locking mechanism.
Affected Software
Event History
Frequently Asked Questions
Which systems are affected by this locking issue?
The issue affects Linux kernel deployments using the MSCC Ocelot driver and its register-based frame injection path. The FDMA path is not affected because it has separate locking.
What access would an attacker need to exploit it?
The CVSS vector indicates local access, low attack complexity, and low privileges are required. No user interaction is required.
What is the impact of successful exploitation?
The reported impact is limited to availability, with a High availability impact and no confidentiality or integrity impact in the supplied CVSS vector.
What should be done if the affected path is in use?
Apply a kernel update containing the missing injection-group locking fix. The provided stable kernel references identify commits carrying the correction.