CVE-2026-99193
Received Received - Intake

Linux Kernel Netdev Crash in TI ICSSM-PRUETH

Publication date: 2026-10-28

Last updated on: 2026-10-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fix crash icssm_prueth_netdev_init() calls of_phy_get_and_connect() before ndev->netdev_ops is assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads dev->netdev_ops through netdev_need_ops_lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Assign netdev_ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-28
Last Modified
2026-10-28
Generated
2026-10-28
AI Q&A
2026-10-28
EPSS Evaluated
N/A
NVD
CVE-2026-99193
EUVD
EUVD-2026-111945

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
Linux Linux ded86da4bbb78cad74cecc368fee3ae3a296e2ca
Linux Linux ded86da4bbb78cad74cecc368fee3ae3a296e2ca
Linux Linux 7.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a crash caused by incorrect initialization order in the icssm-prueth network driver. The function icssm_prueth_netdev_init() calls of_phy_get_and_connect() before assigning ndev->netdev_ops. This leads to a NULL pointer dereference when CONFIG_NET_SHAPER is enabled because phy_attach_direct() tries to access netdev_ops before it is set.

Detection Guidance

This vulnerability causes a kernel crash due to a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Detection requires checking kernel logs for crashes or kernel oops messages related to icssm-prueth or netdev_ops. Monitor system logs for errors like 'NULL pointer dereference' or 'kernel panic' involving the TI ICSSM PRU Ethernet driver.

Impact Analysis

This vulnerability can cause system crashes or instability when the affected Linux kernel driver is used with CONFIG_NET_SHAPER enabled. It may lead to denial of service if the driver fails to initialize properly during network operations.

Mitigation Strategies

Apply the Linux kernel patch that moves the netdev_ops assignment before PHY attach. If immediate patching is not possible, disable CONFIG_NET_SHAPER to prevent the crash. Monitor vendor advisories for updates and test the fix in a non-production environment before deployment.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-99193. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart