PT-2026-5996 · Linux+2 · Linux Kernel+2

Published

2025-01-01

·

Updated

2026-06-04

·

CVE-2025-71196

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the stm32-usphyc probe function. The index variable, used to access the usbphyc->phys[] array, may be out of bounds if equal to usbphyc->nphys. The index value originates from the device tree, but a comparison change from '>' to '>=' resolves the potential out-of-bounds access.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71196
ECHO-84AF-DFBE-441A
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8162-1
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8186-1
USN-8187-1
USN-8188-1
USN-8243-1
USN-8275-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8297-1
USN-8393-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu