CVE-2025-38272

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38272

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches do not support EEE, but provide multiple RGMII ports where external PHYs may be connected. If one of these PHYs are EEE capable, we may try to enable EEE for the MACs, which then hangs the system on access of the (non-existent) EEE registers. Fix this by checking if the switch actually supports EEE before attempting to configure it.

References
Link Resource
https://git.kernel.org/stable/c/1237c2d4a8db79dfd4369bff6930b0e385ed7d5c Patch
https://git.kernel.org/stable/c/2dbccf1eb8c04b84ee3afdb1d6b787db02e7befc Patch
https://git.kernel.org/stable/c/3fbe3f4c57fda09f32e13fa05f53a0cc6f500619 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

20 Nov 2025, 16:56

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1237c2d4a8db79dfd4369bff6930b0e385ed7d5c - () https://git.kernel.org/stable/c/1237c2d4a8db79dfd4369bff6930b0e385ed7d5c - Patch
References () https://git.kernel.org/stable/c/2dbccf1eb8c04b84ee3afdb1d6b787db02e7befc - () https://git.kernel.org/stable/c/2dbccf1eb8c04b84ee3afdb1d6b787db02e7befc - Patch
References () https://git.kernel.org/stable/c/3fbe3f4c57fda09f32e13fa05f53a0cc6f500619 - () https://git.kernel.org/stable/c/3fbe3f4c57fda09f32e13fa05f53a0cc6f500619 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

09 Sep 2025, 17:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/3fbe3f4c57fda09f32e13fa05f53a0cc6f500619 -

10 Jul 2025, 13:17

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: dsa: b53: no habilitar EEE en bcm63xx. Los conmutadores internos BCM63xx no admiten EEE, pero proporcionan múltiples puertos RGMII donde se pueden conectar PHY externos. Si uno de estos PHY admite EEE, podemos intentar habilitar EEE para las MAC, lo que bloquea el sistema al acceder a los registros EEE (inexistentes). Para solucionar esto, verifique si el conmutador admite EEE antes de configurarlo.

10 Jul 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-10 08:15

Updated : 2025-11-20 16:56

NVD link : CVE-2025-38272

Mitre link : CVE-2025-38272

CVE.ORG link : CVE-2025-38272

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo