CVE-2026-64120

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the phy reply size() function. This happens because phy prepare data() uses kstrdup() to allocate strings such as name, drvname, upstream sfp name, and downstream sfp name without verifying if the allocations were successful. If kstrdup() fails and returns NULL, the subsequent call to strlen() in phy reply size() triggers a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.