Unscored severity · published Oct 28, 2026
CVE-2026-99198
net: ethernet: actions: Move setting of netops to fix crash
New
–
CVSS
–
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: actions: Move setting of netops to fix crash
owl_emac_probe() calls owl_emac_phy_init(), which connects the PHY,
before netdev->netdev_ops is assigned. phy_attach_direct() ->
phy_link_topo_add_phy() reads dev->netdev_ops through
netdev_need_ops_lock() since the commit in question, so probing crashes
with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled.
Assign netdev_ops before the PHY attach, as was done for emac in commit
7c9f391ec89c ("net: emac: move setting of netops to fix crash").
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
ded86da4bbb78cad74cecc368fee3ae3a296e2ca before d2eca3a54f415081711cd102d0db733de5abf170; ded86da4bbb78cad74cecc368fee3ae3a296e2ca before c2c4824319850c87e77d26aeb8f860bc310a64d7; 7.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-99198
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-99198
git.kernel.org
https://git.kernel.org/stable/c/d2eca3a54f415081711cd102d0db733de5abf170
git.kernel.org
https://git.kernel.org/stable/c/c2c4824319850c87e77d26aeb8f860bc310a64d7
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
