CVE-2025-38736: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits 0-31. Without this mask, invalid PHY...

CVE-2025-38725: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: add phymask for ax88772 mdio bus Without setting phymask for ax88772 mdio bus, current driver may create at most 32 mdio phy devices with phy address range from 0x00 0x1f. DLink DUB-E100 H/W Ver B1 is such ...

Vulnerability of the ax88772_stop() function in the drivers/net/usb/asix_devices.c module – The Linux kernel’s USB adapter driver support mechanism can be exploited by attackers, allowing them to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the ax88772stop function in the drivers/net/usb/asixdevices.c module – The Linux kernel’s USB adapter support driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...