DEBIAN-CVE-2026-99198: Null Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: actions: Move setting of netops to fix crash owlemacprobe() calls owlemacphyinit(), which connects the PHY, before netdev->netdevops is assigned. phyattachdirect() -> phylinktopoaddphy() reads dev->netdevops through netdevneedopslock() since the commit in question, so probing crashes with a NULL pointer dereference when CONFIGNETSHAPER is enabled. Assign netdevops before the PHY attach, as was done for emac in commit 7c9f391ec89c ("net: emac: move setting of netops to fix crash").
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In owl_emac_probe(), assign netdev->netdev_ops before calling owl_emac_phy_init() or otherwise attaching the PHY.
Linux kernel owl_emac driver netdev->netdev_ops = assigned before PHY attach