CVE-2025-71196
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/02/2026
Última modificación:
04/02/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
phy: stm32-usphyc: Fix off by one in probe()<br />
<br />
The "index" variable is used as an index into the usbphyc->phys[] array<br />
which has usbphyc->nphys elements. So if it is equal to usbphyc->nphys<br />
then it is one element out of bounds. The "index" comes from the<br />
device tree so it&#39;s data that we trust and it&#39;s unlikely to be wrong,<br />
however it&#39;s obviously still worth fixing the bug. Change the > to >=.



