CVE-2025-38736
Fixed in a distro release EPSS <1%
In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits (0-31). Without this mask, invalid PHY addresses could be used, potentially causing issues with MDIO bus operations. Fix this by masking the PHY address with 0x1f (31 decimal) to ensure it stays within the valid range.
Products: Linux, Siemens SIMATIC CN 4100, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | linux-6.1 | 6.1.153-1~deb11u1 |
| Debian 12 | linux | 6.1.153-1 |
| Debian 13 | linux | 6.12.48-1 |
| Debian 14 | linux | 6.16.5-1 |
| SUSE Linux Enterprise High Availability Extension 15 SP6 | kernel-default | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP7 | kernel-default | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise High Availability Extension 16.0 | kernel-default | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_16 | 1-150600.1.3.1 |
| SUSE Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_16 | 1-150600.13.3.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_6 | 1-150700.1.3.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_6 | 1-150700.15.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-64kb | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default-base | 6.4.0-150600.23.73.1.150600.12.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-zfcpdump | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-64kb | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default-base | 6.4.0-150700.53.22.1.150700.17.15.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-source | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-zfcpdump | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-docs | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-obs-build | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-syms | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-docs | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-obs-build | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-source | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-syms | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP6 | kernel-default | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | kernel-default | 6.4.0-150700.53.22.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-azure | 6.4.0-150600.8.52.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | 6.4.0-150600.8.52.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-syms-azure | 6.4.0-150600.8.52.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-azure | 6.4.0-150700.20.18.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-source-azure | 6.4.0-150700.20.18.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-syms-azure | 6.4.0-150700.20.18.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-64kb | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-default | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 |
| SUSE Linux Enterprise Server 16.0 | kernel-docs | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-kvmsmall | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-obs-qa | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-source | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-syms | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server 16.0 | kernel-zfcpdump | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-64kb | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-default | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-docs | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-kvmsmall | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-obs-qa | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-source | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-syms | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | kernel-zfcpdump | 6.12.0-160000.6.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP6 | kernel-default | 6.4.0-150600.23.73.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | kernel-default | 6.4.0-150700.53.22.1 |
| SUSE Linux Micro 6.0 | kernel-default | 6.4.0-35.1 |
| SUSE Linux Micro 6.0 | kernel-default-base | 6.4.0-35.1.21.12 |
| SUSE Linux Micro 6.0 | kernel-kvmsmall | 6.4.0-35.1 |
| SUSE Linux Micro 6.0 | kernel-rt | 6.4.0-37.1 |
| SUSE Linux Micro 6.0 | kernel-source | 6.4.0-35.1 |
| SUSE Linux Micro 6.0 | kernel-source-rt | 6.4.0-37.1 |
| SUSE Linux Micro 6.1 | kernel-default | 6.4.0-35.1 |
| SUSE Linux Micro 6.1 | kernel-default-base | 6.4.0-35.1.21.12 |
| SUSE Linux Micro 6.1 | kernel-kvmsmall | 6.4.0-35.1 |
| SUSE Linux Micro 6.1 | kernel-rt | 6.4.0-37.1 |
| SUSE Linux Micro 6.1 | kernel-source | 6.4.0-35.1 |
| SUSE Linux Micro 6.1 | kernel-source-rt | 6.4.0-37.1 |
| SUSE Linux Micro 6.2 | kernel-64kb | 6.12.0-160000.6.1 |
| SUSE Linux Micro 6.2 | kernel-default | 6.12.0-160000.6.1 |
| SUSE Linux Micro 6.2 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 |
| SUSE Linux Micro 6.2 | kernel-rt | 6.12.0-160000.6.1 |
| SUSE Linux Micro 6.2 | kernel-source | 6.12.0-160000.6.1 |
| SUSE Linux Micro Extras 6.2 | kernel-obs-build | 6.12.0-160000.6.1 |
| SUSE Linux Micro Extras 6.2 | kernel-syms | 6.12.0-160000.6.1 |
| SUSE Real Time Module 15 SP6 | kernel-rt | 6.4.0-150600.10.55.1 |
| SUSE Real Time Module 15 SP6 | kernel-rt_debug | 6.4.0-150600.10.55.1 |
| SUSE Real Time Module 15 SP6 | kernel-source-rt | 6.4.0-150600.10.55.1 |
| SUSE Real Time Module 15 SP6 | kernel-syms-rt | 6.4.0-150600.10.55.1 |
| SUSE Real Time Module 15 SP7 | kernel-rt | 6.4.0-150700.7.22.1 |
| SUSE Real Time Module 15 SP7 | kernel-source-rt | 6.4.0-150700.7.22.1 |
| SUSE Real Time Module 15 SP7 | kernel-syms-rt | 6.4.0-150700.7.22.1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-gke-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-gkeop-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gke-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-intel-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.10 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.14 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.6 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.8 | no fix |
| Ubuntu 22.04 LTS | linux-allwinner-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-azure-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oem-5.17 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.0 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.1 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-riscv-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-intel | no fix |
| Ubuntu 24.04 LTS | linux-lowlatency-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.8 | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu 24.04 LTS | linux-realtime | no fix |
| Ubuntu 24.04 LTS | linux-riscv | no fix |
| openSUSE Leap 15.6 | dtb-aarch64 | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-64kb | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-azure | 6.4.0-150600.8.52.1 |
| openSUSE Leap 15.6 | kernel-debug | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-default | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.73.1.150600.12.32.1 |
| openSUSE Leap 15.6 | kernel-docs | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-kvmsmall | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-obs-build | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-obs-qa | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-rt | 6.4.0-150600.10.55.1 |
| openSUSE Leap 15.6 | kernel-rt_debug | 6.4.0-150600.10.55.1 |
| openSUSE Leap 15.6 | kernel-source | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-source-azure | 6.4.0-150600.8.52.1 |
| openSUSE Leap 15.6 | kernel-source-rt | 6.4.0-150600.10.55.1 |
| openSUSE Leap 15.6 | kernel-syms | 6.4.0-150600.23.73.1 |
| openSUSE Leap 15.6 | kernel-syms-azure | 6.4.0-150600.8.52.1 |
| openSUSE Leap 15.6 | kernel-syms-rt | 6.4.0-150600.10.55.1 |
| openSUSE Leap 15.6 | kernel-zfcpdump | 6.4.0-150600.23.73.1 |
| openSUSE Leap 16.0 | dtb-aarch64 | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-64kb | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-default | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 |
| openSUSE Leap 16.0 | kernel-docs | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-kvmsmall | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-obs-build | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-obs-qa | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-rt | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-source | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-syms | 6.12.0-160000.6.1 |
| openSUSE Leap 16.0 | kernel-zfcpdump | 6.12.0-160000.6.1 |