PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-46287 Linux CVE debrief

A vulnerability has been identified in the Linux kernel, specifically in the txgbe module. When the module is removed, an RTNL assertion warning occurs due to a missing lock around the phylink_disconnect_phy() function. This issue arises for copper NICs with external PHYs, where the driver calls phylink_connect_phy() during probe and phylink_disconnect_phy() during removal. To resolve this, the patch adds rtnl_lock() and rtnl_unlock() around phylink_disconnect_phy() in the remove function.

Vendor
Linux
Product
Unknown
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-08
Original CVE updated
2026-07-25
Advisory published
2026-06-08
Advisory updated
2026-07-25

Who should care

Linux kernel users and administrators, particularly those utilizing the txgbe module, should be aware of this vulnerability. This issue may impact systems with copper NICs and external PHYs.

Technical summary

The vulnerability is caused by a missing RTNL lock in the txgbe module's remove function. Specifically, the phylink_disconnect_phy() function is called without proper locking, leading to an RTNL assertion warning. The patch fixes this by adding rtnl_lock() and rtnl_unlock() around phylink_disconnect_phy().

Defensive priority

Medium

Recommended defensive actions

  • Apply the patch that adds rtnl_lock() and rtnl_unlock() around phylink_disconnect_phy() in the txgbe module's remove function.
  • Use kernel versions that include the fix.

Evidence notes

The vulnerability was resolved by adding locks around the phylink_disconnect_phy() function. Relevant commits can be found at: [linkId: ref-4], [linkId: ref-5], [linkId: ref-6], [linkId: ref-7], [linkId: ref-8].

Sources and references

Verified primary and authoritative sources

  • CVE-2026-46287 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-46287

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-46287 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46287

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/0305e7118451c7c363c18f8113b0d8e0077ffa4c

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/3e223a7fd41ce6fffdb10577df9350385262bf33

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/6c5ec52c68a6a442c8a159615ae092512562318a

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/d29cafc7e4ee9e28a150ba17e9a565ec5d881fbc

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/e159f05e12cc1111a3103b99375ddf0dfd0e7d63

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.