CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814
In the Linux kernel, the following vulnerability has been resolved:
net: phy: micrel: always set shared->phydev for LAN8814
Currently, during the LAN8814 PTP probe shared->phydev is only set if PTP clock gets actually set, otherwise the function will return before setting it.
This is an issue as shared->phydev is unconditionally being used when IRQ is being handled, especially in lan8814gpioprocesscap and since it was not set it will cause a NULL pointer exception and crash the kernel.
So, simply always set shared->phydev to avoid the NULL pointer exception.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40239?
CVE-2025-40239 is categorized as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-40239?
To fix CVE-2025-40239, update your Linux kernel to the latest version provided by your distribution.
What software is affected by CVE-2025-40239?
CVE-2025-40239 affects the Linux Kernel, particularly the LAN8814 PTP probe functionality.
What is the impact of CVE-2025-40239?
The impact of CVE-2025-40239 may include potential issues with precise time protocol functionality due to the improper setting of shared->phydev.
When was CVE-2025-40239 published?
CVE-2025-40239 was published as part of the Linux kernel updates that address various vulnerabilities.