CVE-2025-71196
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
phy: stm32-usphyc: Fix off by one in probe()
In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by one in probe() The "index" variable is used as an index into the usbphyc->phys[] array which has usbphyc->nphys elements. So if it is equal to usbphyc->nphys then it is one element out of bounds. The "index" comes from the device tree so it's data that we trust and it's unlikely to be wrong, however it's obviously still worth fixing the bug. Change the > to >=.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 94c358da3a0545205c6c6a50ae26141f1c73acfa | affected | git | a9eec890879731c280697fdf1c50699e905b2fa7 | Unavailable | None listed |
| 94c358da3a0545205c6c6a50ae26141f1c73acfa | affected | git | fb9d513cdf1614bf0f0e785816afb1faae3f81af | Unavailable | None listed |
| 94c358da3a0545205c6c6a50ae26141f1c73acfa | affected | git | c06f13876cbad702582cd67fc77356e5524d02cd | Unavailable | None listed |
| 94c358da3a0545205c6c6a50ae26141f1c73acfa | affected | git | 76b870fdaad82171a24b8aacffe5e4d9e0d2ee2c | Unavailable | None listed |
| 94c358da3a0545205c6c6a50ae26141f1c73acfa | affected | git | b91c9f6bfb04e430adeeac7e7ebc9d80f9d72bad | Unavailable | None listed |
| 94c358da3a0545205c6c6a50ae26141f1c73acfa | affected | git | 7c27eaf183563b86d815ff6e9cca0210b4cfa051 | Unavailable | None listed |
| 94c358da3a0545205c6c6a50ae26141f1c73acfa | affected | git | cabd25b57216ddc132efbcc31f972baa03aad15a | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.17 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.17 | Unavailable | None listed |
| 5.10.249 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.199 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.162 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.122 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.67 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.7 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 6.19 | unaffected | original_commit_for_fix | Unavailable | * | None listed |