5.5

CVE-2025-39876

net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()

In the Linux kernel, the following vulnerability has been resolved:

net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()

The function of_phy_find_device may return NULL, so we need to take
care before dereferencing phy_dev.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.19.153 < 4.20
Linux ≫ Linux Kernel Version >= 5.4.73 < 5.4.300
Linux ≫ Linux Kernel Version >= 5.8.17 < 5.9
Linux ≫ Linux Kernel Version >= 5.9.2 < 5.10.245
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.194
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.153
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.107
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.48
Linux ≫ Linux Kernel Version >= 6.13 < 6.16.8
Linux ≫ Linux Kernel Version6.17 Updaterc1
Linux ≫ Linux Kernel Version6.17 Updaterc2
Linux ≫ Linux Kernel Version6.17 Updaterc3
Linux ≫ Linux Kernel Version6.17 Updaterc4
Linux ≫ Linux Kernel Version6.17 Updaterc5
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.036
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/03e79de4608bdd48ad6eec272e196124cefaf798
Patch
https://git.kernel.org/stable/c/4fe53aaa4271a72fe5fe3e88a45ce01646b68dc5
Patch
https://git.kernel.org/stable/c/5f1bb554a131e59b28482abad21f691390651752
Patch
https://git.kernel.org/stable/c/eb148d85e126c47d65be34f2a465d69432ca5541
Patch
https://git.kernel.org/stable/c/fe78891f296ac05bf4e5295c9829ef822f3c32e7
Patch
https://git.kernel.org/stable/c/20a3433d31c2d2bf70ab0abec75f3136b42ae66c
Patch
https://git.kernel.org/stable/c/8c60d12bba14dc655d2d948b1dbf390b3ae39cb8
Patch
https://git.kernel.org/stable/c/93a699d6e92cfdfa9eb9dbb8c653b5322542ca4f
Patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
Third Party Advisory
Mailing List