CVE-2026-64120

CVE-2026-64120 pertains to the Linux kernel’s phy_prepare_data() in the net: ethtool path. The issue arises from kstrdup() allocations for strings (name, drvname, upstream_sfp_name, downstream_sfp_name) that were not NULL-checked, allowing a NULL dereference in phy_reply_size() when strlen() is c...