---
id: CVE-2025-38725
title: 'net: usb: asix_devices: add phy_mask for ax88772 mdio bus'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: usb: asix_devices: add phy_mask for ax88772 mdio bus

  Without setting phy_mask for ax88772 mdio bus, current driver may create
  at most 32 mdio phy devices with phy…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f <
    75947d3200de98a9ded9ad8972e02f1a177097fe
  - >-
    Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f <
    59ed6fbdb1bc03316e09493ffde7066f031c7524
  - >-
    Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f <
    ccef5ee4adf56472aa26bdd1f821a6d0cd06089a
  - >-
    Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f <
    ee2cd40b0bb46056949a2319084a729d95389386
  - >-
    Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f <
    a754ab53993b1585132e871c5d811167ad3c52ff
  - >-
    Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f <
    ad1f8313aeec0115f9978bd2d002ef4a8d96c773
  - >-
    Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f <
    4faff70959d51078f9ee8372f8cff0d7045e4114
  - Linux 5.14
published: '2025-09-04'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T08:41:59.819Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38725'
references:
  - url: 'https://git.kernel.org/stable/c/75947d3200de98a9ded9ad8972e02f1a177097fe'
  - url: 'https://git.kernel.org/stable/c/59ed6fbdb1bc03316e09493ffde7066f031c7524'
  - url: 'https://git.kernel.org/stable/c/ccef5ee4adf56472aa26bdd1f821a6d0cd06089a'
  - url: 'https://git.kernel.org/stable/c/ee2cd40b0bb46056949a2319084a729d95389386'
  - url: 'https://git.kernel.org/stable/c/a754ab53993b1585132e871c5d811167ad3c52ff'
  - url: 'https://git.kernel.org/stable/c/ad1f8313aeec0115f9978bd2d002ef4a8d96c773'
  - url: 'https://git.kernel.org/stable/c/4faff70959d51078f9ee8372f8cff0d7045e4114'
tags:
  - cve.org
epss: 0.00157
epssPercentile: 0.04122
ingestedAt: '2026-09-08T15:33:26.997Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: usb: asix_devices: add phy_mask for ax88772 mdio bus

Without setting phy_mask for ax88772 mdio bus, current driver may create
at most 32 mdio phy devices with phy address range from 0x00 ~ 0x1f.
DLink DUB-E100 H/W Ver B1 is such a device. However, only one main phy
device will bind to net phy driver. This is creating issue during system
suspend/resume since phy_polling_mode() in phy_state_machine() will
directly deference member of phydev->drv for non-main phy devices. Then
NULL pointer dereference issue will occur. Due to only external phy or
internal phy is necessary, add phy_mask for ax88772 mdio bus to workarnoud
the issue.

## Affected

- `Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f < 75947d3200de98a9ded9ad8972e02f1a177097fe`
- `Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f < 59ed6fbdb1bc03316e09493ffde7066f031c7524`
- `Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f < ccef5ee4adf56472aa26bdd1f821a6d0cd06089a`
- `Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f < ee2cd40b0bb46056949a2319084a729d95389386`
- `Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f < a754ab53993b1585132e871c5d811167ad3c52ff`
- `Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f < ad1f8313aeec0115f9978bd2d002ef4a8d96c773`
- `Linux >= e532a096be0e5e570b383e71d4560e7f04384e0f < 4faff70959d51078f9ee8372f8cff0d7045e4114`
- `Linux 5.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.