Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: phy: ralink: mt7621-pci: add sentinel to quirks table When the socdevattr for mt7621 is set to register the SOC as a device, the kernel experiences an oops in socdevicematchattr. This quirks test was introduced in the staging...

CVE-2026-90281

A flaw was found in the Linux kernel's QCOM SNPS Femto V2 PHY driver. During an early runtime suspend, a timing window exists where the power management PM callbacks may attempt to access an uninitialized hardware-specific PHY hsphy instance. This can lead to a NULL pointer dereference, potential...

CVE-2026-90288

A flaw was found in the Renesas R-Car Gen2 PHY driver within the Linux kernel. This vulnerability occurs due to a double call to ofnodeput during the PHY creation failure path. A local attacker could potentially exploit this double free condition, leading to memory corruption and a denial of...

CVE-2026-90287

A flaw was found in the Linux kernel's Sunplus PHY Physical Layer driver. Improper error handling within the spuphyinit function could lead to the leakage of clock and reset resources. This resource exhaustion could potentially be exploited by a local attacker, resulting in a Denial of Service Do...

CVE-2026-93276

A flaw was found in the Linux kernel's Renesas R-Car USB 2.0 PHY driver. A local user could cause a denial of service DoS by unbinding or removing the affected device. Because the driver fails to properly register a power regulator cleanup routine during initialization, device removal leaves the...

ROS-20260925-73-0146

The vulnerability of the tegraxusbportunregister function in the drivers/phy/tegra/xusb.c module of the Linux kernel’s PHY driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-97892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the fsl-imx8mq-usb PHY driver. If the probe process fails after the imx95 usb phy get tca function succeeds, the typec switch is not properly released because t...

CVE-2026-90288 phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure

In the Linux kernel, the following vulnerability has been resolved: phy: renesas: rcar-gen2: Fix double ofnodeput on phy creation failure foreachchildofnodescoped releases the node reference on scope exit, so the explicit ofnodeputnp in the devmphycreate error path drops it twice. Drop the...

PT-2026-94630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb-legacy component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm...

PT-2026-94635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sp uphy init function within the sunplus phy driver. Improper error handling in the function's error paths can lead to resource leaks of the clock and reset when c...

PT-2026-94636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar-gen2 Renesas PHY driver where a double reference release occurs during PHY creation failure. The for each child of node scoped function automatically releases...

PT-2026-94629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur during early runtime suspend in the snps-femto-v2 PHY driver. This happens because runtime Power Management PM callbacks may dereference the hsphy...

Linux physical layer network driver Heap Buffer Overflow DoS

The vulnerability of the physetupports function in the drivers/net/phy/phydevice.c file of the Linux physical layer network driver kernel module leads to a mutual locking condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel PHY driver Heap Buffer Overflow DoS

The vulnerability of the imx8mqusbphyprobe function in the driver/phy/freescale/phy-fsl-imx8mq-usb.c file of the Linux kernel’s PHY driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-64228

A flaw was found in the Linux kernel's ethtool PHY Physical Layer driver. A local attacker can trigger a null pointer dereference by unbinding a PHY driver via sysfs while the device is still attached. This can lead to a kernel crash, resulting in a denial of service...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

SUSE CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

CVE-2026-64228

The CVE-2026-64228 issue affects the Linux kernel’s ethtool PHY driver: when a PHY driver is unbound via sysfs while the phy_device remains attached, phydev->drv can become NULL, causing ETHTOOL_MSG_PHY_GET to dereference a NULL drv. The root cause is that phy_remove() clears phydev->drv bu...

CVE-2026-64228 net: ethtool: phy: avoid NULL deref when PHY driver is unbound

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...