CVE-2025-38736

Name of the Vulnerable Software and Affected Versions linux (affected versions not specified)

Description The Linux kernel contained a flaw in the USB/ASIX device driver where the PHY address was not properly masked during MDIO bus initialization. This could lead to shift-out-of-bounds exceptions and potential issues with MDIO bus operations due to the use of invalid PHY addresses. The fix involves masking the PHY address with 0x1f to ensure it remains within the valid range of 0-31.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.