CVE-2026-99195
Received Received - Intake

ethoc Kernel Crash Due to Netdev Operations Misordering

Publication date: 2026-10-28

Last updated on: 2026-10-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: ethoc: move setting of netops to fix crash ethoc_probe() calls ethoc_mdio_probe(), which connects the PHY, before netdev->netdev_ops is assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads dev->netdev_ops through netdev_need_ops_lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Assign netdev_ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-28
Last Modified
2026-10-28
Generated
2026-10-28
AI Q&A
2026-10-28
EPSS Evaluated
N/A
NVD
CVE-2026-99195
EUVD
EUVD-2026-111947

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
Linux Linux ded86da4bbb78cad74cecc368fee3ae3a296e2ca
Linux Linux ded86da4bbb78cad74cecc368fee3ae3a296e2ca
Linux Linux 7.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Linux kernel issue in the ethoc network driver. It occurs because the driver sets up the PHY (physical layer interface) before assigning the network device operations (netdev_ops). This causes a crash with a NULL pointer dereference when a specific kernel configuration (CONFIG_NET_SHAPER) is enabled.

Detection Guidance

This vulnerability affects the Linux kernel's ethoc driver and may cause a crash when CONFIG_NET_SHAPER is enabled. Detection requires checking if the ethoc driver is loaded and if the kernel is compiled with CONFIG_NET_SHAPER. Use commands like 'lsmod | grep ethoc' to check if the driver is loaded and 'grep CONFIG_NET_SHAPER /boot/config-$(uname -r)' to verify the kernel configuration.

Impact Analysis

If you use a system with the affected Linux kernel and the CONFIG_NET_SHAPER option enabled, this vulnerability could cause the system to crash during network driver initialization. This may lead to denial of service or system instability.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this issue. If updating is not immediately possible, consider disabling the ethoc driver by blacklisting it in /etc/modprobe.d/ or disabling CONFIG_NET_SHAPER in the kernel configuration and recompiling the kernel.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-99195. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart