Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits (0-31). Without this mask, invalid PHY addresses could be used, potentially causing issues with MDIO bus operations. Fix this by masking the PHY address with 0x1f (31 decimal) to ensure it stays within the valid range.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
75947d3200de98a9ded9ad8972e02f1a177097fe to < fcb4ce9f729c1d08e53abf9d449340e24c3edee6affected59ed6fbdb1bc03316e09493ffde7066f031c7524 to < 8f141f2a4f2ef8ca865d5921574c3d6535e00a49affectedccef5ee4adf56472aa26bdd1f821a6d0cd06089a to < 748da80831221ae24b4bc8d7ffb22acd5712a341affectedee2cd40b0bb46056949a2319084a729d95389386 to < 22042ffedd8c2c6db08ccdd6d4273068eddd3c5caffectedad1f8313aeec0115f9978bd2d002ef4a8d96c773 to < 523eab02fce458fa6d3c51de5bb055800986953eaffected4faff70959d51078f9ee8372f8cff0d7045e4114 to < 24ef2f53c07f273bad99173e27ee88d44d135b1caffecteda754ab53993b1585132e871c5d811167ad3c52ffaffected6.15.11 to < 6.16affected
Linux Linux
Default version status: unaffected
6.12.43 to < 6.12.44affected6.16.2 to < 6.16.4affected
References
- https://git.kernel.org/stable/c/fcb4ce9f729c1d08e53abf9d449340e24c3edee6 ↗
- https://git.kernel.org/stable/c/8f141f2a4f2ef8ca865d5921574c3d6535e00a49 ↗
- https://git.kernel.org/stable/c/748da80831221ae24b4bc8d7ffb22acd5712a341 ↗
- https://git.kernel.org/stable/c/22042ffedd8c2c6db08ccdd6d4273068eddd3c5c ↗
- https://git.kernel.org/stable/c/523eab02fce458fa6d3c51de5bb055800986953e ↗
- https://git.kernel.org/stable/c/24ef2f53c07f273bad99173e27ee88d44d135b1c ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗