CVE-2026-99195: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash ethoc_probe() calls ethoc_mdio_probe(), which connects the PHY, before netdev->netdev_ops is assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads dev->netdev_ops through netdev_need_ops_lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Assign netdev_ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").

Засегнати продукти

• Linux Linux: ded86da4bbb78cad74cecc368fee3ae3a296e2ca преди c51b13299b4d45226efb09e532fb33e7109f78d7; ded86da4bbb78cad74cecc368fee3ae3a296e2ca преди c9f8ce62a5faa73515ff5457716bd7306d20fd93
• Linux Linux: 7.2; преди 7.2; 7.2.13 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-99195
• https://nvd.nist.gov/vuln/detail/CVE-2026-99195
• https://git.kernel.org/stable/c/c51b13299b4d45226efb09e532fb33e7109f78d7
• https://git.kernel.org/stable/c/c9f8ce62a5faa73515ff5457716bd7306d20fd93