CVE-2026-46287 | Linux Kernel up to 6.6.139/6.12.87/6.18.26/7.0.3 net phylink.c phylink_connect_phy locking

A vulnerability has been found in Linux Kernel up to 6.6.139/6.12.87/6.18.26/7.0.3 and classified as critical. This affects the function phylink_connect_phy of the file drivers/net/phy/phylink.c of the component net. The manipulation leads to improper locking. This vulnerability is traded as CVE-2026-46287. Access to the local network is required for this attack to succeed. There is no exploit available. The affected component should be upgraded.