phywhispererusb

PhyWhisperer-USB What is this thing? This is a hardware trigger for FI or SCA, which triggers on the USB phy. Be sure to read the documentation at http://phywhispererusb.readthedocs.io/ as well! If you are getting started, there are a few demonstration notebooks showing how to: Sniff Data Stream...

BTLE

BTLE BTLE is a free and open-source Bluetooth Low Energy BLE Software Defined Radio software suite and open BTLE chip design. It includes: BTLE baseband algorithms description, Python and Verilog implementation, FPGA and SkyWater 130 PDK OpenLane2 workflow results. Analog Devices AD9361 + Xilinx...

kernel: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

kernel: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

kernel: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in spuphyinit Fix the error paths of spuphyinit to undo exactly what each stage did: return directly if clkprepareenable fails, release only the clock if resetcontroldeassert fails, and jump to...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend Runtime PM must be enabled before creating the PHY, since phycreate only enables runtime PM on the PHY device if it is already enabled on this parent...

PT-2026-128191

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to fix crash owl emac probe calls owl emac phy init, which connects the PHY, before netdev-netdev ops is assigned. phy attach direct - phy link topo add phy reads dev-netdev ops...

Linux kernel SFP I2C DoS

The vulnerability in the sfpi2cmdiobuscreate function within the drivers/net/phy/sfp.c component of the Linux kernel operating system stems from insufficient resource control during its existence. Exploitation of this vulnerability may enable an attacker to cause a denial of service...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove module For the copper NIC with external PHY, the driver calls phylinkconnectPhy during probe and phylinkdisconnectPhy during remove. This resulted in an RTNL assertion warning in...

Astra Linux – vulnerability in linux-6.12, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsaswitchsuspend and dsaswitchresume from their device PM ops: qca8k-8xxx, bcmsf2, microchip ksz...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net: phy: clean the sfp upstream if phy probing fails Sashiko reported that we don’t call sfpbusdelupstream in the probe failure path; let’s add it, otherwise the sfp-bus ends up with a dangling ‘upstream’ field that could be use...

PT-2026-116782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the phylink bringup phy function where the PHY is stored in pl-phydev before the final fallible step. On a MAC implementing LPI Low Power Idle, the phy eee rx clock st...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability stems from the phylinkbringupPhy function in drivers/net/phy/phylink.c. The function records the PHY state before calling phyeeerxclockstop, which may fail. After failure, pl-phydev is not cleared, causing the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: netsec: fixed error handling in netsecregistermdio. If phydeviceregister fails, phydevicefree must be called to reset the reference count; thus, the memory associated with the phy device and its name can be freed in the...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bounds At line 5001, if all elements in the array 'lp-phy8' are not 0, at the end of the 'for' loop, 'k' becomes 8. At this point, the array 'lp-phy8' may ...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when running one-step timestamping. When running one-step sync timestamping, the hardware is configured to insert the TX time into the frame; thus,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in usb-phy dev For the dual-role port, the phy device will be assigned to the usb-phy device, and the port device driver will be used as the dev driver for usb-phy. When we attempt to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: Allow probing without .driverdata Currently, if the .probe element is present in the phydriver structure and there is no .driverdata, a NULL pointer dereferencing occurs. By inserting NULL checks for priv-type, ...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, which may result in an out-of-bounds access to the mdiomap array. One existing case is stmmacinitphy, which may pass -1 as addr. Therefore...