CVE-2018-20854

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.20

Description: An issue was discovered in the Linux kernel. The file drivers/phy/mscc/phy-ocelot-serdes.c contains an off-by-one error, resulting in an out-of-bounds read of ctrl->phys.

Recommendations: For Linux kernel versions prior to 4.20, update to version 4.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable phy-ocelot-serdes.c file until a patch is available.