CVE-2025-38726
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/09/2025
Last modified:
05/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect<br />
<br />
After the call to phy_disconnect() netdev->phydev is reset to NULL.<br />
So fixed_phy_unregister() would be called with a NULL pointer as argument.<br />
Therefore cache the phy_device before this call.