CVE-2025-71196

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the stm32-usphyc probe function. The index variable, used to access the usbphyc->phys[] array, may be out of bounds if equal to usbphyc->nphys. The index value originates from the device tree, but a comparison change from '>' to '>=' resolves the potential out-of-bounds access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.