← Back

CVE-2025-39876

nvd nist
Published: Sep 23, 2025Modified: Oct 19, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function of_phy_find_device may return NULL, so we need to take care before dereferencing phy_dev.

Affected (15)

Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
4.19.153 ≤ version < 4.20
Linux Kernel
5.11 ≤ version < 5.15.194
Linux Kernel
5.16 ≤ version < 6.1.153
Linux Kernel
5.4.73 ≤ version < 5.4.300
Linux Kernel
5.8.17 ≤ version < 5.9
Linux Kernel
5.9.2 ≤ version < 5.10.245
Linux Kernel
6.13 ≤ version < 6.16.8
Linux Kernel
6.2 ≤ version < 6.6.107
Linux Kernel
6.7 ≤ version < 6.12.48
Linux Kernel
Version 6.17 rc1
Linux Kernel
Version 6.17 rc2
Linux Kernel
Version 6.17 rc3
Linux Kernel
Version 6.17 rc4
Linux Kernel
Version 6.17 rc5
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 11.0

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (9)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory

Timeline

No history available yet.