CVE-2025-38725

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the USB/AX88772 MDIO bus driver. Without a phy mask set for the AX88772 MDIO bus, the driver may create multiple MDIO phy devices, leading to a NULL pointer dereference during system suspend/resume operations when accessing non-main phy devices via phy polling mode() in phy state machine(). This issue occurs because only one main phy device is intended to bind to the net phy driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.