CVE-2025-38272

CVE-2025-38272

Medium · published July 10, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: b53: do not enable EEE on bcm63xx

BCM63xx internal switches do not support EEE, but provide multiple RGMII

ports where external PHYs may be connected. If one of these PHYs are EEE

capable, we may try to enable EEE for the MACs, which then hangs the

system on access of the (non-existent) EEE registers.

Fix this by checking if the switch actually supports EEE before

attempting to configure it.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.0th percentile
Published
2025-07-10T12:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.13, < 6.15.36.15.3
linux/linux_kernel≥ 4.15, < 6.12.466.12.46
References (4)
EPSS history
Timeline
  • 10 JUL 07:41Z
    net: dsa: b53: do not enable EEE on bcm63xx
    cvelistv5