CVE-2025-71094 — net: usb: asix: validate PHY address before use

Back Back to CVE browser

MEDIUM

net: usb: asix: validate PHY address before use

Published Jan 13, 2026

5.5

MEDIUM

CVSS 3.1

EPSS 0.13%

Description

The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can return an invalid address (>= PHY_MAX_ADDR), which causes a warning in mdiobus_get_phy():

addr 207 out of range WARNING: drivers/net/phy/mdio_bus.c:76

Validate the PHY address in asix_read_phy_addr() and remove the now-redundant check in ax88172a.c.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
  -
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
unaffected
- Version
  5.13.13
  Status
  affected
  Constraints
  <5.14
Vendor Linux Product Linux Default
affected
- Version
  5.14
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.14
- Version
  5.15.198
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  6.1.160
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.12.64
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.18.4
  Status
  unaffected
  Constraints
  <=6.18.*
- Version
  6.19
  Status
  unaffected
  Constraints
  <=*
- Version
  6.6.120
  Status
  unaffected
  Constraints
  <=6.6.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected	-
	affected
	affected
	affected
	affected
	affected
	affected

Linux

unaffected

Version	Status	Constraints
5.13.13	affected	<5.14

Linux

affected

Version	Status	Constraints
5.14	affected	-
0	unaffected	<5.14
5.15.198	unaffected	<=5.15.*
6.1.160	unaffected	<=6.1.*
6.12.64	unaffected	<=6.12.*
6.18.4	unaffected	<=6.18.*
6.19	unaffected	<=*
6.6.120	unaffected	<=6.6.*

Red Hat Enterprise Linux 10

kernel

Affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Affected
Red Hat Enterprise Linux 8

kernel-rt

Affected
Red Hat Enterprise Linux 9

kernel

Affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Affected	n/a
Red Hat Enterprise Linux 9	kernel	Affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

Red Hat statement

This vulnerability requires physical access to connect a malicious USB device. The impact is limited to a kernel warning message; the invalid address is rejected before it can cause further damage. While the warning indicates a potential issue, it does not result in a crash or security compromise.

Metrics

0.13% 0.00134

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00134

Score over time

Jan–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.13% (0.00134)	2.40th	v5 (v2026.06.15)
Jun 15, 2026	0.11% (0.00114)	1.77th	v5 (v2026.06.15)
Jan 14, 2026	0.02% (0.00018)	3.87th	v4 (v2025.03.14)

Weaknesses (1)

CWE-1285

References (11)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-71094		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2429124		Issue Tracking
https://git.kernel.org/stable/c/38722e69ee64dbb020028c93898d25d6f4c0e0b2		Patch
https://git.kernel.org/stable/c/98a12c2547a44a5f03f35c108d2022cc652cbc4d		Patch
https://git.kernel.org/stable/c/a1e077a3f76eea0dc671ed6792e7d543946227e8		Patch
https://git.kernel.org/stable/c/bf8a0f3b787ca7c5889bfca12c60c483041fbee3		Patch
https://git.kernel.org/stable/c/f5f4f30f3811d37e1aa48667c36add74e5a8d99f		Patch
https://git.kernel.org/stable/c/fc96018f09f8d30586ca6582c5045a84eafef146		Patch
https://lore.kernel.org/linux-cve-announce/2026011343-CVE-2025-71094-087b@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-71094
https://www.cve.org/CVERecord?id=CVE-2025-71094