Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-80993

net: phylink: correctly validate returned PCS in phylink_inband_caps

Description

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylink_inband_caps In phylink_inband_caps(), the PCS returned by mac_select_pcs is only checked if NULL but mac_select_pcs can also return an error pointer. This can cause a kernel panic as phylink_pcs_inband_caps() only checks if passed PCS is not NULL and directly dereference ops from the phylink_pcs struct. Use the IS_ERR_OR_NULL macro to address both case where the returned PCS can be NULL or an error pointer and prevent a kernel panic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • df874f9e52c340cc6f0a0014a97b778f67d46849 to < b6b533f83461c3730875cf3ed5ff6362dcb67be9affected
  • df874f9e52c340cc6f0a0014a97b778f67d46849 to < fb4d77553841ae85bed9b2cf03351c401e871d85affected
  • df874f9e52c340cc6f0a0014a97b778f67d46849 to < f2849b1fd059ec9b3281b771e6ac5aad9feee851affected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.18.50 to ≤ 6.18.*unaffected
  • 7.2.4 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References