Potential NULL Pointer Dereference in Linux Kernel's Ethernet Driver

CVE-2025-39876

What is CVE-2025-39876?

A vulnerability in the Linux kernel's Ethernet driver can lead to a potential NULL pointer dereference due to the function of_phy_find_device returning NULL. This flaw could adversely affect system stability and performance if not properly handled. Developers are encouraged to verify pointers before dereferencing them to mitigate this risk.

References