Networking Crash Vulnerability in Linux Kernel Affects Device Functionality

CVE-2026-99195

What is CVE-2026-99195?

A vulnerability was identified in the Linux kernel pertaining to the ethoc probe function. This issue arises when netdev->netdev_ops is not assigned before the PHY is attached. As a result, if CONFIG_NET_SHAPER is enabled, probing may cause a crash due to a NULL pointer dereference. The resolution involves assigning netdev_ops prior to initiating the PHY attachment, aligning with best practices established in a previous commit to prevent similar crashes.

References