Skip to content
Heist/ feed
High

net/mdiobus: Fix potential out-of-bounds read/write access

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write. Fix that by adding address verification before read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Announced Source revision 1
Original source ↗

CVE-2025-38111

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-38111

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "080bb352fad00d04995102f681b134e3754bfb6e",
        "lessThan": "19c5875e26c4ed5686d82a7d8f7051385461b9eb",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "080bb352fad00d04995102f681b134e3754bfb6e",
        "lessThan": "014ad9210373d2104f6ef10e6bb999a7a0a4c50e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "080bb352fad00d04995102f681b134e3754bfb6e",
        "lessThan": "73d478234a619f3476028cb02dee699c30ae8262",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "080bb352fad00d04995102f681b134e3754bfb6e",
        "lessThan": "bab6bca0834cbb5be2a7cfe59ec6ad016ec72608",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "080bb352fad00d04995102f681b134e3754bfb6e",
        "lessThan": "b02d9d2732483e670bc34cb233d28e1d43b15da4",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "080bb352fad00d04995102f681b134e3754bfb6e",
        "lessThan": "049af7ac45a6b407748ee0995278fd861e36df8f",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "080bb352fad00d04995102f681b134e3754bfb6e",
        "lessThan": "0e629694126ca388916f059453a1c36adde219c4",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/phy/mdio_bus.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.6"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.6",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.239",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.186",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.142",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.94",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.34",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.15.3",
        "versionType": "semver",
        "lessThanOrEqual": "6.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.16",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/phy/mdio_bus.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2025-38111

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#30523 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement