CVE-2026-64228

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the ethtool PHY component when a PHY driver is unbound via sysfs. This happens because phy remove() clears the phydev->drv pointer without calling phy detach(), leaving the phy device in the link topology xarray. Consequently, the ethnl req get phydev() function still returns the device, and the ETHTOOL MSG PHY GET request triggers a system crash (oops) when attempting to access phydev->drv->name during the execution of kstrdup().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.