CVE-2025-71196
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by one in probe() The "index" variable is used as an index into the usbphyc->phys[] array which has usbphyc->nphys elements. So if it is equal to usbphyc->nphys then it is one element out of bounds. The "index" comes from the device tree so it's data that we trust and it's unlikely to be wrong, however it's obviously still worth fixing the bug. Change the > to >=.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedFeb 4, 2026
First seenFeb 4, 2026
How to fix
Update
- Linux Linuxa9eec890879731c280697fdf1c50699e905b2fa7, fb9d513cdf1614bf0f0e785816afb1faae3f81af, c06f13876cbad702582cd67fc77356e5524d02cd, 76b870fdaad82171a24b8aacffe5e4d9e0d2ee2c, b91c9f6bfb04e430adeeac7e7ebc9d80f9d72bad, 7c27eaf183563b86d815ff6e9cca0210b4cfa051, cabd25b57216ddc132efbcc31f972baa03aad15a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 94c358da3a0545205c6c6a50ae26141f1c73acfa ≤ v < a9eec890879731c280697fdf1c50699e905b2fa7, 94c358da3a0545205c6c6a50ae26141f1c73acfa ≤ v < fb9d513cdf1614bf0f0e785816afb1faae3f81af, 94c358da3a0545205c6c6a50ae26141f1c73acfa ≤ v < c06f13876cbad702582cd67fc77356e5524d02cd, 94c358da3a0545205c6c6a50ae26141f1c73acfa ≤ v < 76b870fdaad82171a24b8aacffe5e4d9e0d2ee2c, 94c358da3a0545205c6c6a50ae26141f1c73acfa ≤ v < b91c9f6bfb04e430adeeac7e7ebc9d80f9d72bad, 94c358da3a0545205c6c6a50ae26141f1c73acfa ≤ v < 7c27eaf183563b86d815ff6e9cca0210b4cfa051, 94c358da3a0545205c6c6a50ae26141f1c73acfa ≤ v < cabd25b57216ddc132efbcc31f972baa03aad15a, 4.17 | a9eec890879731c280697fdf1c50699e905b2fa7, fb9d513cdf1614bf0f0e785816afb1faae3f81af, c06f13876cbad702582cd67fc77356e5524d02cd, 76b870fdaad82171a24b8aacffe5e4d9e0d2ee2c, b91c9f6bfb04e430adeeac7e7ebc9d80f9d72bad, 7c27eaf183563b86d815ff6e9cca0210b4cfa051, cabd25b57216ddc132efbcc31f972baa03aad15a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.