CVE-2018-20854: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl->phys out-of-bounds read.

Affected products

• Linux Linux Kernel: before 4.20 (fixed in 4.20)

Published 2019-07-26. Last modified 2026-06-17.