CVE-2023-52984: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability has been identified in the Linux kernel affecting the DP83825/DP83826 PHY devices. The issue was disclosed on March 27, 2025, and is tracked as CVE-2023-52984. The vulnerability stems from an uninitialized private data pointer in the probe() function, which is specifically designed for the DP83822 PHY but affects the smaller DP83825/26 models (NVD).

The vulnerability occurs because the probe() function is only used for the DP83822 PHY, leaving the private data pointer uninitialized for the smaller DP83825/26 models. While most private data structure uses are contained within DP83822-specific callbacks, the interrupt configuration is shared across all models. This implementation flaw leads to a NULL pointer dereference when accessing unchecked private data on the smaller PHYs (NVD).

When exploited, this vulnerability can cause a NULL pointer dereference in the affected systems, potentially leading to system crashes or denial of service conditions (NVD).

The vulnerability has been resolved by implementing proper pointer verification before accessing the private data structure (NVD).