{"id":"CVE-2025-71094","revision":"90ec75e06b144a30ab32276ba456ef88","records":[{"revision":"90ec75e06b144a30ab32276ba456ef88","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-71094","aliases":[],"title":"net: usb: asix: validate PHY address before use","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: asix: validate PHY address before use\n\nThe ASIX driver reads the PHY address from the USB device via\nasix_read_phy_addr(). A malicious or faulty device can return an\ninvalid address (>= PHY_MAX_ADDR), which causes a warning in\nmdiobus_get_phy():\n\n  addr 207 out of range\n  WARNING: drivers/net/phy/mdio_bus.c:76\n\nValidate the PHY address in asix_read_phy_addr() and remove the\nnow-redundant check in ax88172a.c.","state":0,"publishedAt":"2026-01-13T15:34:54.669+00:00","modifiedAt":"2026-10-19T18:15:12.474+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/usb/asix_common.c\",\n                        \"drivers/net/usb/ax88172a.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7e88b11a862afe59ee0c365123ea5fb96a26cb3b\",\n                            \"lessThan\": \"fc96018f09f8d30586ca6582c5045a84eafef146\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7e88b11a862afe59ee0c365123ea5fb96a26cb3b\",\n                            \"lessThan\": \"f5f4f30f3811d37e1aa48667c36add74e5a8d99f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7e88b11a862afe59ee0c365123ea5fb96a26cb3b\",\n                            \"lessThan\": \"38722e69ee64dbb020028c93898d25d6f4c0e0b2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7e88b11a862afe59ee0c365123ea5fb96a26cb3b\",\n                            \"lessThan\": \"98a12c2547a44a5f03f35c108d2022cc652cbc4d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7e88b11a862afe59ee0c365123ea5fb96a26cb3b\",\n                            \"lessThan\": \"bf8a0f3b787ca7c5889bfca12c60c483041fbee3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7e88b11a862afe59ee0c365123ea5fb96a26cb3b\",\n                            \"lessThan\": \"a1e077a3f76eea0dc671ed6792e7d543946227e8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4e4f3cb41d687bd64cd03358862b23c84d82329e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5.13.13\",\n                            \"lessThan\": \"5.14\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/usb/asix_common.c\",\n                        \"drivers/net/usb/ax88172a.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.14\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.198\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.160\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.120\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.64\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.4\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/fc96018f09f8d30586ca6582c5045a84eafef146","https://git.kernel.org/stable/c/f5f4f30f3811d37e1aa48667c36add74e5a8d99f","https://git.kernel.org/stable/c/38722e69ee64dbb020028c93898d25d6f4c0e0b2","https://git.kernel.org/stable/c/98a12c2547a44a5f03f35c108d2022cc652cbc4d","https://git.kernel.org/stable/c/bf8a0f3b787ca7c5889bfca12c60c483041fbee3","https://git.kernel.org/stable/c/a1e077a3f76eea0dc671ed6792e7d543946227e8"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-71094","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-71094","identifiers":["CVE-2025-71094"]},"retained":false,"historicalAffected":[]}],"coverage":[]}