CVE-2025-38110Medium· 6.0▾ SunlitA flaw was found in the Linux kernel's MDIO (Management Data Input/Output) bus subsystem. This vulnerability allows a local user with administrative privileges to cause memory corruption or information disclosure by supplying an out-of-ran…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the vendor's CSAF advisory record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
7.8 → 6
high → medium
A flaw was found in the Linux kernel's MDIO (Management Data Input/Output) bus subsystem. This vulnerability allows a local user with administrative privileges to cause memory corruption or information disclosure by supplying an out-of-range physical layer (PHY) address through an input/output control (ioctl) command. Due to missing boundary checks during Clause 45 operations, the kernel accesses an internal statistics array beyond its allocated bounds.
kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access — rated Moderate by Red Hat. Released 2025-07-03, updated 2026-10-16.
Affected:
Fixed:
No fix planned:
Not affected:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect. https://access.redhat.com/errata/RHSA-2025:11855 For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect. https://access.redhat.com/errata/RHSA-2025:11245 For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect. https://access.redhat.com/errata/RHSA-2025:11861
Workarounds / mitigations:
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-22013Medium· 5.5kernel: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (CVE-2025-22013)
CVE-2026-103484High· 8.8IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
CVE-2025-12801Medium· 6.5A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time
CVE-2026-32936High· 7.5github.com/coredns/coredns: CoreDNS: Denial of Service via oversized DNS-over-HTTPS GET requests (CVE-2026-32936)
CVE-2026-59317Medium· 6.5DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation. Spring for Apach…
CVE-2026-12185Medium· 6.5In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check