AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-40239

UNKNOWN · CVSS N/A EPSS 0.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-04 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It affects Linux.

CVE
CVE-2025-40239
Severity
UNKNOWN
CVSS
N/A
EPSS
0.19%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: always set shared->phydev for LAN8814 Currently, during the LAN8814 PTP probe shared->phydev is only set if PTP clock gets actually set, otherwise the function will return before setting it. This is an issue as shared->phydev is unconditionally being used when IRQ is being handled, especially in lan8814_gpio_process_cap and since it was not set it will cause a NULL pointer exception and crash the kernel. So, simply always set shared->phydev to avoid the NULL pointer exception.