CVE-2025-40239
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/12/2025
Última modificación:
04/12/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: phy: micrel: always set shared->phydev for LAN8814<br />
<br />
Currently, during the LAN8814 PTP probe shared->phydev is only set if PTP<br />
clock gets actually set, otherwise the function will return before setting<br />
it.<br />
<br />
This is an issue as shared->phydev is unconditionally being used when IRQ<br />
is being handled, especially in lan8814_gpio_process_cap and since it was<br />
not set it will cause a NULL pointer exception and crash the kernel.<br />
<br />
So, simply always set shared->phydev to avoid the NULL pointer exception.



