CVE-2025-38110 is a high-severity vulnerability in the Linux kernel's net/mdiobus subsystem. It involves a potential out-of-bounds read/write access when using clause 45 (C45) MDIO operations via ioctl calls. The vulnerability arises because the kernel does not verify the MDIO address parameter passed to the ioctl, allowing addresses beyond the supported 32 PHY_MAX_ADDR limit. This can lead to out-of-bounds access in the mdiobus stats array. The issue has been fixed by adding address verification before performing C45 read/write operations, improving security by preventing invalid accesses.