CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
Published Sep 23, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: fec: Fix possible NPD in fecenetphyresetafterclkenable()
The function ofphyfinddevice may return NULL, so we need to take care before dereferencing phydev.
Affected Software
18 affected components
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.104.2-4
Linux Linux kernel>=4.19.153<4.20
Linux Linux kernel>=5.4.73<5.4.300
Linux Linux kernel>=5.8.17<5.9
Linux Linux kernel>=5.9.2<5.10.245
Linux Linux kernel>=5.11<5.15.194
Linux Linux kernel>=5.16<6.1.153
Linux Linux kernel>=6.2<6.6.107
Linux Linux kernel>=6.7<6.12.48
Linux Linux kernel>=6.13<6.16.8
Linux Linux kernel=6.17-rc1
Linux Linux kernel=6.17-rc2
Linux Linux kernel=6.17-rc3
Linux Linux kernel=6.17-rc4
Linux Linux kernel=6.17-rc5
Debian Debian Linux=11.0
Remediation
Event History
Sep 23, 2025
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Data Sourced
via NVD·06:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 24, 2025
Data Sourced
via Microsoft·01:02 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:02 AM
DescriptionSeverity
Updated
via Microsoft·01:02 AM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39876?
CVE-2025-39876 has been classified as a moderate-severity vulnerability in the Linux kernel.
2
How do I fix CVE-2025-39876?
To fix CVE-2025-39876, update your Linux kernel to the patched version provided by the official maintainers.
3
What component is affected by CVE-2025-39876?
CVE-2025-39876 affects the fec (Fast Ethernet Controller) network driver in the Linux kernel.
4
What are the potential impacts of CVE-2025-39876?
CVE-2025-39876 could lead to null pointer dereference, potentially causing application crashes or denial of service.
5
Is there a workaround for CVE-2025-39876?
There are no known workarounds for CVE-2025-39876; applying the latest kernel updates is the recommended approach.