Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-99195

net: ethoc: move setting of netops to fix crash

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash ethoc_probe() calls ethoc_mdio_probe(), which connects the PHY, before netdev->netdev_ops is assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads dev->netdev_ops through netdev_need_ops_lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Assign netdev_ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ded86da4bbb78cad74cecc368fee3ae3a296e2ca to < c51b13299b4d45226efb09e532fb33e7109f78d7affected
  • ded86da4bbb78cad74cecc368fee3ae3a296e2ca to < c9f8ce62a5faa73515ff5457716bd7306d20fd93affected

Linux Linux

Default version status: affected

  • 7.2affected
  • 0 to < 7.2unaffected
  • 7.2.13 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References