–
Not scored
CVE-2026-99193
net: ti: icssm-prueth: Move setting of netops to fix crash
LinuxAffectedLinux, Linux
FixUpdate to 955bb7cf680d8699ce94c73539af882840a9be43, 0, 7.2.13, 7.3 or newer
PublishedOct 28, 10:35 · Linux
ScoredNot yet
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC
What we know
No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
No severity score yet.
Description
In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: Move setting of netops to fix crash icssm_prueth_netdev_init() calls of_phy_get_and_connect() before ndev->netdev_ops is assigned. phy_attach_direct() -> phy_link_topo_add_phy() reads dev->netdev_ops through netdev_need_ops_lock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIG_NET_SHAPER is enabled. Assign netdev_ops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").
From Linux
Affected and fixed versions
ProductAffectedFixed inLinuxded86da4bbb78cad74cecc368fee3ae3a296e2ca – before e7694aab7ad002480ed9d534bd8d6bc28b798d8a–Linuxded86da4bbb78cad74cecc368fee3ae3a296e2ca – before 955bb7cf680d8699ce94c73539af882840a9be43955bb7cf680d8699ce94c73539af882840a9be43Linux7.2–LinuxNot affected0LinuxNot affected7.2.13LinuxNot affected7.3
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known