Threats tagged 'ghsa-wcfp-94c7-jmv4'

CVE-2025-38537 is a medium severity vulnerability in the Linux kernel's generic PHY (genphy) driver. It involves a deadlock condition caused by registering LEDs for generic PHY devices, which do not support LEDs. This deadlock occurs during synchronous removal of the PHY device, leading to a lock cycle involving rtnl_lock and netdevice notifier functions. The issue arises when the PHY's device tree node has an "leds" subnode, causing LED registration and unregistration for a non-generic driver that is not loaded. The fix prevents LED registration for generic PHYs to avoid this deadlock.