Linux Kernel EUVD-2026-39323

Patch available per vendor advisory: upstream fix is kernel commit 48774e87bbaa0056819d4b52301e4692e50e3252 (https://git.kernel.org/stable/c/48774e87bbaa0056819d4b52301e4692e50e3252), which adds the missing sfp_bus_del_upstream() call in the phy probe failure path; update to the stable release that incorporates this commit (no single tagged release number was provided in the input, so confirm the exact backported version against your distribution's kernel changelog). The released patched version is identified by commit rather than by a vendor-tagged release here, so confirm the build with your distro. There is no clean runtime workaround for a kernel memory-safety bug, but because the trigger requires a PHY probe failure plus an SFP event, exposure can be reduced by ensuring correct/known-good SFP modules and driver firmware, restricting physical and administrative access to systems with SFP cages, and avoiding loading/reloading affected PHY drivers on untrusted hardware - these reduce the chance of hitting the probe-failure path but do not eliminate the underlying defect.