https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:10:25 +0000 https://vulnerability.circl.lu/vuln/cve-2025-71094 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: usb: asix: validate PHY address before use</p> <p>The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can return an invalid address (&gt;= PHY_MAX_ADDR), which causes a warning in mdiobus_get_phy():</p> <p>addr 207 out of range WARNING: drivers/net/phy/mdio_bus.c:76</p> <p>Validate the PHY address in asix_read_phy_addr() and remove the now-redundant check in ax88172a.c.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: usb: asix: validate PHY address before use</p> <p>The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can return an invalid address (&gt;= PHY_MAX_ADDR), which causes a warning in mdiobus_get_phy():</p> <p>addr 207 out of range WARNING: drivers/net/phy/mdio_bus.c:76</p> <p>Validate the PHY address in asix_read_phy_addr() and remove the now-redundant check in ax88172a.c.</p> https://vulnerability.circl.lu/vuln/cve-2025-71094