Linux Kernel Airoha MDIO Controller Regmap Pointer Validation Vulnerability

Vulnerability

A vulnerability exists in the Linux kernel's handling of the Airoha MDIO bus controller. In the 'airoha_mdio_probe()' function, the 'device_node_to_regmap()' call can return an error pointer if the regmap initialization fails. The driver currently stores this pointer without validating it, potentially leading to a crash when the pointer is dereferenced. This issue has been addressed by adding a check for error pointers and returning the appropriate error code, thereby making the probe process more robust.

Impact

The vulnerability could lead to a system crash due to an unvalidated pointer being dereferenced, causing a null pointer dereference.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is 'b2b526c2cf57d14ee269e012ed179081871f45a1', which is included in the Linux kernel stable tree.

Added: Dec 16, 2025, 4:53 PM
Updated: Dec 16, 2025, 4:53 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
1.4
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.