Null Pointer Dereference Vulnerability in Linux Kernel Product by Vendor

CVE-2026-99196

What is CVE-2026-99196?

In the Linux Kernel, a vulnerability exists that causes a crash during network operations due to a NULL pointer dereference. The issue arises during the execution of the au1000_probe() function, which calls au1000_mii_probe() to connect the PHY. Since the dev->netdev_ops is not assigned before the PHY attachment, accessing it results in a crash. This vulnerability is particularly triggered when CONFIG_NET_SHAPER is enabled. A patch has been introduced to assign netdev_ops prior to the PHY attach, thus resolving the issue and preventing potential crashes.

References