CVE ID : CVE-2025-38086
Published : June 28, 2025, 8:15 a.m. | 3 hours, 1 minute ago
Description : In the Linux kernel, the following vulnerability has been resolved:
net: ch9200: fix uninitialised access during mii_nway_restart
In mii_nway_restart() the code attempts to call
mii->mdio_read which is ch9200_mdio_read(). ch9200_mdio_read()
utilises a local buffer called “buff”, which is initialised
with control_read(). However “buff” is conditionally
initialised inside control_read():
if (err == size) {
memcpy(data, buf, size);
}
If the condition of “err == size” is not met, then
“buff” remains uninitialised. Once this happens the
uninitialised “buff” is accessed and returned during
ch9200_mdio_read():
return (buff[0] | buff[1]
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more…
Source: Read More