CVE-2026-90287

A flaw was found in the Linux kernel's Sunplus PHY Physical Layer driver. Improper error handling within the spuphyinit function could lead to the leakage of clock and reset resources. This resource exhaustion could potentially be exploited by a local attacker, resulting in a Denial of Service Do...

CVE-2026-93276

A flaw was found in the Linux kernel's Renesas R-Car USB 2.0 PHY driver. A local user could cause a denial of service DoS by unbinding or removing the affected device. Because the driver fails to properly register a power regulator cleanup routine during initialization, device removal leaves the...

ROS-20260925-73-0146

The vulnerability of the tegraxusbportunregister function in the drivers/phy/tegra/xusb.c module of the Linux kernel’s PHY driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-97892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the fsl-imx8mq-usb PHY driver. If the probe process fails after the imx95 usb phy get tca function succeeds, the typec switch is not properly released because t...

CVE-2026-90288 phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure

In the Linux kernel, the following vulnerability has been resolved: phy: renesas: rcar-gen2: Fix double ofnodeput on phy creation failure foreachchildofnodescoped releases the node reference on scope exit, so the explicit ofnodeputnp in the devmphycreate error path drops it twice. Drop the...

PT-2026-94636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar-gen2 Renesas PHY driver where a double reference release occurs during PHY creation failure. The for each child of node scoped function automatically releases...

PT-2026-94629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference can occur during early runtime suspend in the snps-femto-v2 PHY driver. This happens because runtime Power Management PM callbacks may dereference the hsphy...

PT-2026-94635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sp uphy init function within the sunplus phy driver. Improper error handling in the function's error paths can lead to resource leaks of the clock and reset when c...

PT-2026-94630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-dereference issue exists in the qmp-usb-legacy component of the qcom phy driver. A crash can occur during early runtime suspend if the runtime suspend callback executes after pm...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: phy: ralink: mt7621-pci: add sentinel to quirks table By fixing socdevattr to register the SOC as a device, the kernel will encounter an OOPs error in socdevicematchattr. This quirks test was introduced in the staging driver in t...

The vulnerability of the phy_setup_ports() function in the drivers/net/phy/phy_device.c file of the Linux physical layer network driver kernel module allows a hacker to cause a service failure.

The vulnerability of the physetupports function in the drivers/net/phy/phydevice.c file of the Linux physical layer network driver kernel module leads to a mutual locking condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the imx8mq_usb_phy_probe() function in the driver/phy/freescale/phy-fsl-imx8mq-usb.c file of the Linux kernel’s PHY driver allows a hacker to cause a service failure.

The vulnerability of the imx8mqusbphyprobe function in the driver/phy/freescale/phy-fsl-imx8mq-usb.c file of the Linux kernel’s PHY driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-64228

A flaw was found in the Linux kernel's ethtool PHY Physical Layer driver. A local attacker can trigger a null pointer dereference by unbinding a PHY driver via sysfs while the device is still attached. This can lead to a kernel crash, resulting in a denial of service...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

SUSE CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

CVE-2026-64228

The CVE-2026-64228 issue affects the Linux kernel’s ethtool PHY driver: when a PHY driver is unbound via sysfs while the phy_device remains attached, phydev->drv can become NULL, causing ETHTOOL_MSG_PHY_GET to dereference a NULL drv. The root cause is that phy_remove() clears phydev->drv bu...

EUVD-2026-48636

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

CVE-2026-64228

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

CVE-2026-64228 net: ethtool: phy: avoid NULL deref when PHY driver is unbound

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...

PT-2026-64343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ethtool PHY component when a PHY driver is unbound via sysfs. This happens because phy remove clears the phydev-drv pointer without calling phy...