cbcvebase.
CVE-2025-38110
published 2025-07-03

CVE-2025-38110: In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly…

PriorityP431high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.17%
6.6th percentile
In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via C45 (clause 45) mdiobus, there is no verification of parameters passed to the ioctl and it accepts any mdio address. Currently there is support for 32 addresses in kernel via PHY_MAX_ADDR define, but it is possible to pass higher value than that via ioctl. While read/write operation should generally fail in this case, mdiobus provides stats array, where wrong address may allow out-of-bounds read/write. Fix that by adding address verification before C45 read/write operation. While this excludes this access from any statistics, it improves security of read/write operation.

Affected

24 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.12.35-1 (forky)linux 6.12.35-1 (forky)
linuxlinux
linuxlinux>= 4e4aafcddbbfcdd6eed5780e190fcbfac8b4685a < abb0605ca00979a49572a6516f6db22c3dc57223abb0605ca00979a49572a6516f6db22c3dc57223
linuxlinux>= 4e4aafcddbbfcdd6eed5780e190fcbfac8b4685a < 31bf7b2b92563a352788cf9df3698682f659bacc31bf7b2b92563a352788cf9df3698682f659bacc
linuxlinux>= 4e4aafcddbbfcdd6eed5780e190fcbfac8b4685a < 4ded22f7f3ce9714ed72c3e9c68fea1cb9388ae74ded22f7f3ce9714ed72c3e9c68fea1cb9388ae7
linuxlinux>= 4e4aafcddbbfcdd6eed5780e190fcbfac8b4685a < 260388f79e94fb3026c419a208ece8358bb7b555260388f79e94fb3026c419a208ece8358bb7b555
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 6.12.35-16.12.35-1
linuxlinux_kernel>= 0 < 6.8.0-100.1006.8.0-100.100
linuxlinux_kernel>= 6.13 < 6.15.36.15.3
linuxlinux_kernel>= 6.3 < 6.6.946.6.94
linuxlinux_kernel>= 6.7 < 6.12.346.12.34
msrcazl3_kernel_6.6.92.2-2_on_azure_linux_3.0
msrcazl3_kernel_6.6.96.1-1_on_azure_linux_3.0
ubuntulinux-aws
ubuntulinux-aws-6.8
ubuntulinux-gkeop
ubuntulinux-nvidia
ubuntulinux-nvidia-6.8
ubuntulinux-oracle
ubuntulinux-oracle-6.8
ubuntulinux-raspi-realtime
ubuntulinux-realtime

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1LOW
vendor_redhat7.1HIGH
vendor_msrc5.3MEDIUM
vendor_ubuntu3.2LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.