In the Linux kernel, the following vulnerability has been resolved:
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Syzbot reported shift-out-of-bounds exception on MDIO bus initialization.
The PHY address should be masked to 5 bits (0-31). Without this mask, invalid PHY addresses could be used, potentially causing issues with MDIO bus operations.
Fix this by masking the PHY address with 0x1f (31 decimal) to ensure it stays within the valid range.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Sep 5, 2025 |
| Suse | — | Upgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dtb-sprdUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-qcom | Dec 5, 2025 | Oct 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub