Linux Kernel Vulnerability in macb Device Handling

CVE-2025-39805

What is CVE-2025-39805?

A vulnerability in the Linux kernel's macb driver has been identified that arises from improper handling during the removal of macb devices. Specifically, the driver executes the phy_exit() function before calling unregister_netdev() when detaching the device. This sequence results in a warning issued by kernfs indicating a failure to properly remove directory entries, as the PHY is being exited while the netdev remains registered. To address this issue, the correct procedure must involve unregistering the netdev prior to shutting down the PHY, ensuring proper cleanup and maintenance of network device integrity.

References