{"id":"CVE-2025-39876","state":"PUBLISHED","title":"net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()\n\nThe function of_phy_find_device may return NULL, so we need to take\ncare before dereferencing phy_dev.","publishedAt":"2025-09-23T06:00:47.731Z","updatedAt":"2026-05-23T16:00:56.017Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"9e70485b40c8306298adea8bdc867ca27f88955a","status":"affected","lessThan":"8c60d12bba14dc655d2d948b1dbf390b3ae39cb8","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"20a3433d31c2d2bf70ab0abec75f3136b42ae66c","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"93a699d6e92cfdfa9eb9dbb8c653b5322542ca4f","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"5f1bb554a131e59b28482abad21f691390651752","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"fe78891f296ac05bf4e5295c9829ef822f3c32e7","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"4fe53aaa4271a72fe5fe3e88a45ce01646b68dc5","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"eb148d85e126c47d65be34f2a465d69432ca5541","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"03e79de4608bdd48ad6eec272e196124cefaf798","versionType":"git"},{"version":"c068e505f229ca5f778f825f1401817ce818e917","status":"affected","versionType":"git"},{"version":"8a6ab151443cd71e2aa5e8b7014e3453dbd51935","status":"affected","versionType":"git"},{"version":"ce88b5f42868ef4964c497d4dfcd25e88fd60c5b","status":"affected","versionType":"git"},{"version":"5.4.73","status":"affected","lessThan":"5.4.300","versionType":"semver"},{"version":"4.19.153","status":"affected","lessThan":"4.20","versionType":"semver"},{"version":"5.8.17","status":"affected","lessThan":"5.9","versionType":"semver"},{"version":"5.9.2","status":"affected","lessThan":"5.10","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/freescale/fec_main.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.10","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.10","versionType":"semver"},{"version":"5.4.300","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.245","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.194","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.153","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.107","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.48","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.16.8","status":"unaffected","lessThanOrEqual":"6.16.*","versionType":"semver"},{"version":"6.17","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/freescale/fec_main.c"]}],"references":["https://git.kernel.org/stable/c/8c60d12bba14dc655d2d948b1dbf390b3ae39cb8","https://git.kernel.org/stable/c/20a3433d31c2d2bf70ab0abec75f3136b42ae66c","https://git.kernel.org/stable/c/93a699d6e92cfdfa9eb9dbb8c653b5322542ca4f","https://git.kernel.org/stable/c/5f1bb554a131e59b28482abad21f691390651752","https://git.kernel.org/stable/c/fe78891f296ac05bf4e5295c9829ef822f3c32e7","https://git.kernel.org/stable/c/4fe53aaa4271a72fe5fe3e88a45ce01646b68dc5","https://git.kernel.org/stable/c/eb148d85e126c47d65be34f2a465d69432ca5541","https://git.kernel.org/stable/c/03e79de4608bdd48ad6eec272e196124cefaf798","https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:09.358Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/39xxx/CVE-2025-39876.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-39876","state":"PUBLISHED","datePublished":"2025-09-23T06:00:47.731Z","dateUpdated":"2026-05-23T16:00:56.017Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-04-16T07:20:57.144Z"},"containers":{"cna":{"title":"net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()\n\nThe function of_phy_find_device may return NULL, so we need to take\ncare before dereferencing phy_dev."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"9e70485b40c8306298adea8bdc867ca27f88955a","status":"affected","lessThan":"8c60d12bba14dc655d2d948b1dbf390b3ae39cb8","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"20a3433d31c2d2bf70ab0abec75f3136b42ae66c","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"93a699d6e92cfdfa9eb9dbb8c653b5322542ca4f","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"5f1bb554a131e59b28482abad21f691390651752","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"fe78891f296ac05bf4e5295c9829ef822f3c32e7","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"4fe53aaa4271a72fe5fe3e88a45ce01646b68dc5","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"eb148d85e126c47d65be34f2a465d69432ca5541","versionType":"git"},{"version":"64a632da538a6827fad0ea461925cedb9899ebe2","status":"affected","lessThan":"03e79de4608bdd48ad6eec272e196124cefaf798","versionType":"git"},{"version":"c068e505f229ca5f778f825f1401817ce818e917","status":"affected","versionType":"git"},{"version":"8a6ab151443cd71e2aa5e8b7014e3453dbd51935","status":"affected","versionType":"git"},{"version":"ce88b5f42868ef4964c497d4dfcd25e88fd60c5b","status":"affected","versionType":"git"},{"version":"5.4.73","status":"affected","lessThan":"5.4.300","versionType":"semver"},{"version":"4.19.153","status":"affected","lessThan":"4.20","versionType":"semver"},{"version":"5.8.17","status":"affected","lessThan":"5.9","versionType":"semver"},{"version":"5.9.2","status":"affected","lessThan":"5.10","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/freescale/fec_main.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.10","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.10","versionType":"semver"},{"version":"5.4.300","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.245","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.194","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.153","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.107","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.48","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.16.8","status":"unaffected","lessThanOrEqual":"6.16.*","versionType":"semver"},{"version":"6.17","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/freescale/fec_main.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/8c60d12bba14dc655d2d948b1dbf390b3ae39cb8"},{"url":"https://git.kernel.org/stable/c/20a3433d31c2d2bf70ab0abec75f3136b42ae66c"},{"url":"https://git.kernel.org/stable/c/93a699d6e92cfdfa9eb9dbb8c653b5322542ca4f"},{"url":"https://git.kernel.org/stable/c/5f1bb554a131e59b28482abad21f691390651752"},{"url":"https://git.kernel.org/stable/c/fe78891f296ac05bf4e5295c9829ef822f3c32e7"},{"url":"https://git.kernel.org/stable/c/4fe53aaa4271a72fe5fe3e88a45ce01646b68dc5"},{"url":"https://git.kernel.org/stable/c/eb148d85e126c47d65be34f2a465d69432ca5541"},{"url":"https://git.kernel.org/stable/c/03e79de4608bdd48ad6eec272e196124cefaf798"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-23T16:00:56.017Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.73","versionEndExcluding":"5.4.300"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"5.10.245"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"5.15.194"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"6.1.153"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"6.6.107"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"6.12.48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"6.16.8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10","versionEndExcluding":"6.17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19.153"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.8.17"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.9.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T17:44:21.070Z"}}]}}}