PT-2025-46746 · Linux+2 · Linux Kernel+2
Published
2025-09-30
·
Updated
2026-02-24
·
CVE-2025-40189
CVSS v2.0
3.6
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The
lan78xx read raw eeprom function did not correctly handle EEPROM read timeout errors (-ETIMEDOUT). The function would discard the original timeout error and return only the status of a subsequent LED pin configuration restore operation. This could lead callers to incorrectly assume that the data buffer was valid even when the EEPROM read had timed out, resulting in potentially invalid data being used. The issue occurs within the lan78xx read eeprom function, which is called by lan78xx init mac address and lan78xx reset. The lan78xx bind and lan78xx probe functions are also involved in the call stack.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu