Wind River Support Network

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]net: usb: asix_devices: add phy_mask for ax88772 mdio bus[EOL][EOL]Without setting phy_mask for ax88772 mdio bus, current driver may create[EOL]at most 32 mdio phy devices with phy address range from 0x00 ~ 0x1f.[EOL]DLink DUB-E100 H/W Ver B1 is such a device. However, only one main phy[EOL]device will bind to net phy driver. This is creating issue during system[EOL]suspend/resume since phy_polling_mode() in phy_state_machine() will[EOL]directly deference member of phydev->drv for non-main phy devices. Then[EOL]NULL pointer dereference issue will occur. Due to only external phy or[EOL]internal phy is necessary, add phy_mask for ax88772 mdio bus to workarnoud[EOL]the issue.

CREATE(Triage):(User=admin) [CVE-2025-38725 (https://nvd.nist.gov/vuln/detail/CVE-2025-38725)