CVE-2025-71094None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can re…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
net: usb: asix: validate PHY address before use
The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can return an invalid address (>= PHY_MAX_ADDR), which causes a warning in mdiobus_get_phy():
addr 207 out of range WARNING: drivers/net/phy/mdio_bus.c:76
Validate the PHY address in asix_read_phy_addr() and remove the now-redundant check in ax88172a.c.
Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < fc96018f09f8d30586ca6582c5045a84eafef146Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < f5f4f30f3811d37e1aa48667c36add74e5a8d99fLinux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < 38722e69ee64dbb020028c93898d25d6f4c0e0b2Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < 98a12c2547a44a5f03f35c108d2022cc652cbc4dLinux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < bf8a0f3b787ca7c5889bfca12c60c483041fbee3Linux >= 7e88b11a862afe59ee0c365123ea5fb96a26cb3b < a1e077a3f76eea0dc671ed6792e7d543946227e8Linux 4e4f3cb41d687bd64cd03358862b23c84d82329eLinux >= 5.13.13 < 5.14Linux 5.14Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets