CVE-2025-40239 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: always set shared->phydev for LAN8814 Currently, during the LAN8814 PTP probe shared->phydev is only set if PTP clock gets actually set, otherwise the function will return before setting it. This is an issue as shared->phydev is unconditionally being used when IRQ is being handled, especially in lan8814_gpio_process_cap and since it was not set it will cause a NULL pointer exception and crash the kernel. So, simply always set shared->phydev to avoid the NULL pointer exception.
A vulnerability in the Linux kernel's Micrel PHY driver for the LAN8814 Ethernet controller can lead to a NULL pointer dereference, causing a kernel crash. This issue arises because the shared->phydev variable is only set under certain conditions during the PTP probe process. If those conditions are not met, the variable remains unset, yet is still used when handling interrupts. The lack of a proper value leads to a NULL pointer exception, crashing the kernel.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 4, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/399d10934740ae8cdaa4e3245f7c5f6c332da844 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/b093b06826b836c2824858669db080c190c04715 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/da1ef8e9eb5d4a12bec32d11636e521e7d529b9e | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
| Micrel LAN8814 | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 4, 2025 | New CVE Received | kernel.org |