CVE-2025-71094None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can re…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
net: usb: asix: validate PHY address before use
The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can return an invalid address (>= PHY_MAX_ADDR), which causes a warning in mdiobus_get_phy():
addr 207 out of range WARNING: drivers/net/phy/mdio_bus.c:76
Validate the PHY address in asix_read_phy_addr() and remove the now-redundant check in ax88172a.c.
Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < fc96018f09f8d30586ca6582c5045a84eafef146Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < f5f4f30f3811d37e1aa48667c36add74e5a8d99fLinux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < 38722e69ee64dbb020028c93898d25d6f4c0e0b2Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < 98a12c2547a44a5f03f35c108d2022cc652cbc4dLinux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < bf8a0f3b787ca7c5889bfca12c60c483041fbee3Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < a1e077a3f76eea0dc671ed6792e7d543946227e8Linux 4e4f3cb41d687bd64cd03358862b23c84d82329eLinux >= 5.13.13 < 5.14Linux 5.14Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device