net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.2%
probabilidade de exploração
0.2%top 95% das CVEs
exploração observada
nãonenhuma fonte reporta
In the Linux kernel, the following vulnerability has been resolved:
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
Syzbot reported shift-out-of-bounds exception on MDIO bus initialization.
The PHY address should be masked to 5 bits (0-31). Without this
mask, invalid PHY addresses could be used, potentially causing issues
with MDIO bus operations.
Fix this by masking the PHY address with 0x1f (31 decimal) to ensure
it stays within the valid range.
Produtos afetados
Linux · LinuxReferências
https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-032379.htmlhttps://git.kernel.org/stable/c/22042ffedd8c2c6db08ccdd6d4273068eddd3c5chttps://git.kernel.org/stable/c/24ef2f53c07f273bad99173e27ee88d44d135b1chttps://git.kernel.org/stable/c/523eab02fce458fa6d3c51de5bb055800986953ehttps://git.kernel.org/stable/c/748da80831221ae24b4bc8d7ffb22acd5712a341https://git.kernel.org/stable/c/8f141f2a4f2ef8ca865d5921574c3d6535e00a49https://git.kernel.org/stable/c/fcb4ce9f729c1d08e53abf9d449340e24c3edee6https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html