In the Linux kernel networking stack, the function phy_prepare_data() allocates strings for device and driver names using kstrdup(). These allocations are not checked for failure, so a NULL return causes a later unconditional strlen() call in phy_reply_size() to dereference a null pointer. The resulting kernel panic brings the system down, causing a denial‑of‑service condition. The flaw is a classic NULL pointer dereference (CWE‑476) and does not expose data or allow remote code execution.

All Linux kernel builds before the patches referenced by commit c/3dbe20a38, c/4908f139, and c/61f53c1e are vulnerable. This includes the upstream Linux kernel supplied by the Linux:Linux vendor and any distribution kernels that have not yet incorporated these fixes.

The CVSS score of 5.5 rates this issue as moderate severity. The EPSS score of less than 1% indicates that exploitation is unlikely in the wild, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that executing ethtool commands requires CAP_NET_ADMIN or root privileges, making the likely attack vector local. An attacker who succeeds in forcing a kstrdup() failure will cause the kernel to panic, but cannot gain additional access or compromise data beyond the loss of availability.