PT-2026-64343 · Linux · Linux

CVE-2026-64228

·

Publicado

2026-07-24

·

Atualizado

2026-07-24

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: phy: avoid NULL deref when PHY driver is unbound
phydev->drv can become NULL while the phy device is still attached to its net device, namely after the PHY driver is unbound via sysfs:
echo <mdio id> > /sys/bus/mdio bus/drivers/<phy drv>/unbind
phy remove() clears phydev->drv but doesn't call phy detach(), so the phy device stays in the link topology xarray and ethnl req get phydev() still hands it back. ETHTOOL MSG PHY GET then oopses on:
rep data->drvname = kstrdup(phydev->drv->name, GFP KERNEL);
drvname is already treated as optional by phy reply size(), phy fill reply() and phy cleanup data(), so just skip the allocation when there is no driver bound.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2026-64228

Produtos afetados

Linux